Utilities · sync
ssl-inspect
TLS cert chain inspector. Expiry, SANs, cipher, hostname match.
Cert chain
About
ssl-inspect opens a real TLS handshake to the target host and returns everything the certificate dump tells you, in structured form:
• **Chain** — every cert in the presented chain (leaf → intermediates → root if sent), parsed: subject, issuer, serial, validity window, signature algorithm, fingerprint, SANs. • **Cipher** — negotiated cipher suite (name, standardName, TLS version). • **Authorization** — Node's verify-by-default outcome plus the raw `authorizationError` if any. Toggle `rejectUnauthorized: false` to inspect self-signed or expired certs without tearing down. • **Summary** — daysUntilExpiry, isExpired, isExpiringSoon (<30d), matchesHost (SAN/CN check), hasWeakSignature (SHA-1 / MD5 flag).
Use it for: cert-expiry monitoring (cron + Slack alert), pre-deployment checks, hardening audits, debugging CDN cert misconfiguration. 10-second connect timeout.
{
"type": "object",
"required": [
"host"
],
"properties": {
"host": {
"type": "string",
"maxLength": 253
},
"port": {
"type": "integer",
"minimum": 1,
"maximum": 65535,
"default": 443
},
"servername": {
"type": "string",
"description": "Override SNI (defaults to host)."
},
"rejectUnauthorized": {
"type": "boolean",
"default": true,
"description": "Set false to inspect self-signed / expired certs."
}
}
}These are descriptive previews. Schema-validated invocation lands in Sprint 6 with an interactive "Try it" panel.
Reviews (0)
No reviews yet — be the first to share your experience.