OpsBench

SSL Checker

Validity, chain, expiry and hostname match for any server.

● Runs on our server
Our server opens a TLS connection to the host and inspects the certificate it serves: expiry, hostname match and full chain of trust. Works with implicit TLS (443, 465, 993, 8443) — not STARTTLS.

How it works

Our server opens a TLS connection to host:443 with SNI, reads the certificate the server presents, and parses it. We check the dates, the chain up to a trusted root, and whether the hostname matches the CN or any SAN.

Related tools

Let's Encrypt Wizard PEM to PFX CSR Generator CSR Decoder