ssl-check

What this skill does

Performs a comprehensive SSL/TLS inspection of the target host using openssl s_client and curl. Checks certificate expiry date, issuer, and SAN (Subject Alternative Name), verifies whether deprecated protocol versions are disabled (TLS 1.0/1.1), lists cipher suites, and validates the certificate chain.

When to use

• To quickly assess the security level of a server's TLS configuration
• To debug connection errors caused by certificate expiry or incorrect SAN
• During bug bounty or penetration testing to check for downgrade attack potential

Prerequisites

• openssl installed (included by default on most Linux/macOS systems)
• curl installed
• Network access to port 443 (or specified port) on the target host

Inputs