---
title: "SSL Certificate Check"
method: GET
path: "/api/util/ssl"
---

# SSL Certificate Check

`GET /api/util/ssl`

## Request

- Base URL: `https://dechonet.com`
- URL: `https://dechonet.com/api/util/ssl`
- Auth: one of:
  - none
  - HTTP bearer

Inspect a host's served TLS/SSL certificate and connection: expiry date, issuer, SAN list, chain integrity, revocation (OCSP, then CRL; unknown when neither answers — not graded unless revoked), TLS version, and HSTS, returning an A+ to F grade weighted by certificate validity (40%), TLS version (25%), chain trust (15%), and HSTS (20%).

## Query parameters

- `host` string, required
- `port` number
- `lang` 'en' | 'ko'

## Response `200`

Result

- Envelope
  - `ok` boolean, required
  - `requestId` string, required
  - `cached` boolean, required: True when a recent stored result was returned.
  - `updatedAt` string, date-time, nullable: When the result was produced.
  - `data` unknown, required
  - `error` object, nullable, required
    - `code` 'INVALID_INPUT' | 'NOT_FOUND' | 'RATE_LIMITED' | 'UPSTREAM_ERROR' | 'UPSTREAM_TIMEOUT' | 'INVALID_API_KEY' | 'API_KEY_REQUIRED'
    - `message` string
    - `retryAfter` integer, nullable
    - `reason` string
  - `previousSnapshot` object: The previous stored result for the same target, when there is one.

## Other responses

- `400`: Invalid input
- `401`: Wrong or revoked API key, or a key is required
- `429`: Rate limited — see the Retry-After header
- `503`: An upstream source failed or timed out

---

[API](https://skmtc.dev/dechonet/apis/dechonet-api.md) · [All operations](https://skmtc.dev/dechonet/apis/dechonet-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dechonet/apis/dechonet-api/revisions/87d89f1c4d1b?raw)