SSL checker
Expiry, names, and the chain for a certificate on port 443.
Fetches a public URL
Use from your agent
Streamable HTTP at https://benchline.fabwaseem.com/mcp. No key. The tool name is check_ssl.
mcp.jsonjson
1{
2 "mcpServers": {
3 "benchline": {
4 "url": "https://benchline.fabwaseem.com/mcp"
5 }
6 }
7}
tools/calljson
1{
2 "jsonrpc": "2.0",
3 "id": 1,
4 "method": "tools/call",
5 "params": {
6 "name": "check_ssl",
7 "arguments": {
8 "host": "example"
9 }
10 }
11}
Related tools
- HTTP headersFollow redirects and grade the security headers on a public URL.HTTPMCPNew
- DNS lookupQuery A, AAAA, MX, TXT, CNAME, and CAA over DNS-over-HTTPS.DNSMCPNew
- CSP builderBuild a Content-Security-Policy and a Next.js headers snippet.HeadersMCPNew
- URL encoder and parserEncode or decode a URL, then break the query string into parameters.URLsMCPNew
How it works
Free SSL certificate checker. Connect to a public host on port 443 and report days until expiry, the subject, issuer, subject alternative names, protocol, and chain. Private addresses are refused.
- 01
Enter a hostname
example.com or https://example.com. Anything other than port 443 is refused.
- 02
Read the dates
Days remaining is counted from the not-after date. Under 14 days fails the grade.
- 03
Read the names
The checklist says whether the hostname is covered by a subject alternative name.