🔐 SSL Certificate Checker - Analyze SSL/TLS Certs

🖧
The selected healthy worker peer will originate this network request.

🌐 Server Configuration

Enter the hostname to analyze its SSL certificate

Default: 443 (HTTPS). Use 993 for IMAPS, 995 for POP3S, etc.

🔍 Certificate Analysis

Connecting and analyzing certificate...
⚠️

Analysis Failed

🧪 Example Hosts

🔐 Certificate Summary

Common Name:

{{ results.certificate.subject }}

Valid From:

{{ results.certificate.valid_from }}

Valid To:

{{ results.certificate.valid_to }}

Days Until Expiry:

{{ results.certificate.days_until_expiry }} days

Status:

{{ getValidationStatusText(results.certificate) }}

🛡️ Security Analysis

Key Algorithm:

{{ results.certificate.key_algorithm }} {{ results.certificate.key_size }} bits {{ getKeyStrengthText(results.certificate.key_size) }}

Signature Algorithm:

{{ results.certificate.signature_algorithm }} {{ getSignatureStrengthText(results.certificate.signature_algorithm) }}

Certificate Status: {{ results.certificate.status.toUpperCase() }}
Security Features:
  • ✓ Certificate authority signed
  • ✓ Subject Alternative Names ({{ results.certificate.subject_alt_names.length }} domains)
  • ✓ Strong key size ({{ results.certificate.key_size }}+ bits)
  • ✓ Modern signature algorithm

📋 Certificate Details

Issuer:

{{ results.certificate.issuer }}

Serial Number:

{{ results.certificate.serial_number }}

Subject Alternative Names:
{{ san }}
Fingerprints:
SHA-256: {{ results.certificate.fingerprint_sha256 }}
SHA-1: {{ results.certificate.fingerprint_sha1 }}

🔗 Certificate Chain

Level {{ cert.level }}: {{ cert.subject }}
Issuer: {{ cert.issuer }}
Valid: {{ cert.valid_from }} - {{ cert.valid_to }}
Serial: {{ cert.serial_number }}

⚠️ Certificate Warnings

  • • {{ warning }}

No certificate analysis yet

Enter a hostname and click"Check Certificate" to analyze SSL/TLS certificate details.

⚠️

ℹ️ About SSL Certificate Checker

TLS Certificate Chain and Expiry Analysis

TLS certificates bind a public key to one or more DNS names so browsers can authenticate HTTPS connections. The certificate format is X.509, profiled for the internet by RFC 5280, and TLS 1.3 is specified in RFC 8446. This checker connects to a host and inspects the presented certificate, expiry window, subject alternative names, issuer, and chain information.

Certificate Information We Analyze

🔍 Basic Certificate Details

  • Subject & Issuer: Certificate owner and authority
  • Validity Period: Start and expiration dates
  • Serial Number: Unique certificate identifier
  • Signature Algorithm: Security algorithm used

🔐 Security Analysis

  • Key Size & Strength: Cryptographic key analysis
  • Certificate Chain: Complete trust chain validation
  • Extensions: Subject Alternative Names (SAN)
  • Expiry Status: Certificate validity assessment

Security Features Checked

Certificate Validity

Expiration status

Date range validation

Key Strength

RSA/ECDSA analysis

Cryptographic strength

Trust Chain

Certificate authority

Intermediate certificates

Security Best Practices

  • Use modern algorithms: SHA-256 or better signature algorithms
  • Strong key sizes: 2048+ bit RSA or 256+ bit ECDSA keys
  • Monitor expiry dates: Replace certificates before expiration
  • Validate certificate chains: Ensure complete trust path
  • Check Subject Alternative Names: Verify all covered domains; browser name matching uses SAN entries, not just the common name
  • Watch CT exposure: public certificates are logged through Certificate Transparency, described by RFC 9162
  • Understand scope: a valid certificate does not prove the site is safe, only that the TLS identity and chain checks pass from this test environment

API Usage Example:

POST /api/tools/network/ssl-certificate
Content-Type: application/json

{
    "hostname": "google.com",
    "port": 443
}
Ready