ssl-certs

Diagnose SSL certificate issues and provide remediation steps using OpenSSL.

Updated Jan 15, 2026
One-click install
npx skills add https://github.com/KaiserWhoLearns/skillsbench --skill ssl-certs-kaiserwholearns
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ssl-certs
Source: https://github.com/KaiserWhoLearns/skillsbench/tree/main/registry/terminal_bench_2.0/terminal_bench_2_0_openssl-selfsigned-cert/environment/skills/ssl-certs
Command: npx skills add https://github.com/KaiserWhoLearns/skillsbench --skill ssl-certs-kaiserwholearns

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SSL certificates frequently expire or misconfigure, causing outages and trust warnings. This Skill helps identify expiration, chain issues, and TLS handshake problems, and provides remediation guidance.

Core Features & Use Cases

  • Diagnose expiry, chain validity, and hostname mismatches for local and remote servers.
  • Provide step-by-step remediation guidance and renewal commands tailored to the environment.
  • Use case: when a domain shows HTTPS errors, the Skill can verify certificate validity and outline renewal steps.

Quick Start

Provide a domain name to test, and run the SSL diagnostic workflow to identify expiration, chain issues, and renewal steps.

Frequently Asked Questions about ssl-certs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose an SSL certificate expiration issue on a remote server?

To diagnose SSL certificate expiration on a remote server, provide the domain name to run an OpenSSL diagnostic workflow. This process identifies the expiration date, verifies chain validity, and outlines specific remediation steps to prevent outages and trust warnings.

What causes TLS handshake failures and how can I identify them?

TLS handshake failures often stem from invalid certificate chains or hostname mismatches. You can identify them by running a diagnostic workflow using Bash and OpenSSL to verify the certificate chain and pinpoint configuration issues across local and remote servers.

How do I fix an invalid SSL certificate chain?

Fixing an invalid SSL certificate chain involves using OpenSSL to verify the chain and identify missing or misconfigured intermediate certificates. The diagnostic workflow detects the specific chain issue and provides tailored remediation guidance to restore trust.

Can I use OpenSSL to check for hostname mismatches in my SSL certificates?

Yes, you can use OpenSSL via a diagnostic workflow to check for hostname mismatches in SSL certificates. By testing the provided domain name, the workflow verifies that the certificate matches the requested hostname and flags mismatches causing HTTPS errors.

What is the best way to renew an expiring SSL certificate?

The best way to renew an expiring SSL certificate is to run a diagnostic workflow that first verifies the current certificate validity and identifies the expiration. It then suggests specific renewal commands tailored to your environment to ensure continuous HTTPS uptime.