---
title: "Protected Check Ssl Status"
method: GET
path: "/api/websites/{website_id}/ssl-status"
tags: ["Websites - Protected"]
---

# Protected Check Ssl Status

`GET /api/websites/{website_id}/ssl-status`

Verify the *real* HTTPS state of the website's public `www` domain.

Checks that www.<domain> is registered as an Alternate Domain Name on the
site's CloudFront distribution AND that the distribution's attached ACM
cert is ISSUED and covers it. This is the authoritative "is SSL working"
answer — it does NOT check the EC2 apex Let's Encrypt cert, which says
nothing about the CloudFront www path and previously caused a false
"Certificado SSL encontrado" while the site was actually down.

## Path parameters

- `website_id` integer, required

## Headers

- `x-api-token` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/multigest/apis/multigest-protected-api.md) · [All operations](https://skmtc.dev/multigest/apis/multigest-protected-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/multigest/multigest-protected-api/revisions/4b44eb76b3ee/schema)