qzx checkSslCertificate

Representative output example

This illustrative JSON is derived from the current implementation-backed result contract. It shows what the command can return without claiming a recorded execution; values vary with inputs, host, permissions, and optional tools.

Example command: qzx checkSslCertificate example.com --json

{
    "success": true,
    "message": "Inspects certificate dates, hostname coverage, and trust-chain validation. In this illustrative example, the command completed successfully.",
    "chain_trusted": true,
    "cipher_bits": 256,
    "cipher_protocol": "TLSv1.3",
    "cipher_suite": "TLS_AES_256_GCM_SHA384",
    "dates": {
        "not_before": "2026-06-01T00:00:00Z",
        "not_after": "2026-09-01T23:59:59Z"
    },
    "days_remaining": 38,
    "host": "example.com",
    "hostname_match": true,
    "is_expired": false,
    "is_started": true,
    "is_valid": true,
    "issuer": "CN=Example Trust Services",
    "port": 443,
    "ssl_version": "TLSv1.3",
    "subject": "CN=example.com",
    "subject_alt_names": [
        "example.com",
        "www.example.com"
    ],
    "verification_error": null
}

{
    "$schema": "https://json-schema.org/draft/2020-12/schema",
    "type": "object",
    "required": [
        "success",
        "message"
    ],
    "properties": {
        "success": {
            "type": "boolean"
        },
        "message": {
            "type": "string"
        },
        "chain_trusted": [],
        "cipher_bits": [],
        "cipher_protocol": [],
        "cipher_suite": [],
        "dates": {
            "type": "object",
            "properties": {
                "not_before": {
                    "type": "null"
                },
                "not_after": {
                    "type": "null"
                }
            },
            "additionalProperties": true
        },
        "days_remaining": [],
        "error": {
            "type": "string"
        },
        "error_code": {
            "type": "string"
        },
        "host": [],
        "hostname_match": [],
        "is_expired": [],
        "is_started": [],
        "is_valid": [],
        "issuer": [],
        "port": [],
        "ssl_version": [],
        "subject": [],
        "subject_alt_names": [],
        "verification_error": []
    },
    "additionalProperties": true
}

Errors and limits

The public contract requires success=false and a descriptive message on failure. This catalog does not yet declare a command-specific error taxonomy; inspect the result and do not invent error codes.

QZX is alpha software. Optional dependencies, permissions, and host capabilities can change the result.

Evidence workflow: requires an authorized endpoint or reviewed fixture.