tls-certificate-troubleshooter

Diagnose TLS certificate and SSH host key trust issues for HTTPS connections.

434|54|Updated May 1, 2026
One-click install
npx skills add https://github.com/ryantsai/KKTerm --skill tls-certificate-troubleshooter
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tls-certificate-troubleshooter
Source: https://github.com/ryantsai/KKTerm/tree/main/assistant-skills/tls-certificate-troubleshooter
Command: npx skills add https://github.com/ryantsai/KKTerm --skill tls-certificate-troubleshooter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Diagnose TLS and certificate problems that block secure connections (HTTPS, API, proxies) and SSH host key trust in KKTerm.

Core Features & Use Cases

  • Identify TLS certificate problems (expired, untrusted, hostname mismatch, incomplete chain) across URL connections, APIs, and dashboards.
  • Separate TLS trust issues from SSH host key trust and provide guidance appropriate to each system.
  • Use cases include debugging website access behind corporate proxies, API access failures, and internal service TLS misconfigurations.

Quick Start

Provide the failing host and error details to start diagnosing TLS certificate and handshake problems.

Frequently Asked Questions about tls-certificate-troubleshooter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose TLS certificate errors affecting HTTPS connections?

To diagnose TLS certificate errors, provide the failing host and error details to identify expired, untrusted, or hostname mismatch certificates across HTTPS connections, APIs, and dashboards.

Why does my HTTPS connection fail behind a corporate inspection proxy?

HTTPS connections fail behind corporate proxies due to incomplete certificate chains or untrusted inspection certificates. This diagnosis separates TLS trust issues from SSH host keys to provide specific guidance.

Can I use this to debug SSH host key trust issues separately from TLS?

Yes, you can debug SSH host key trust issues separately from TLS. The diagnosis distinguishes between TLS certificate problems and SSH host key trust, applying appropriate checks for each system.

What is the best way to fix a hostname mismatch on an internal service certificate?

The best way to fix a hostname mismatch is by diagnosing the TLS certificate to verify the requested host against the certificate's subject names, avoiding unsafe bypasses unless specifically noted.

Does diagnosing an incomplete certificate chain require specific proxy configurations?

Diagnosing an incomplete certificate chain does not require specific proxy configurations but evaluates trust across WebView2, proxies, and dashboards by checking certificate times and chain validity.