Skip to main content

See through any TLS endpoint

One inspection returns the certificate and its chain, whether clients will trust it, and which TLS versions and legacy ciphers the server still accepts.

Hostname

A URL is fine. Add a port for anything but HTTPS, such as mail.example.com:993 — allowed are 443, 465, 636, 853, 993, 995, 5061, 8443.

A report is what one server saw at one moment, from one address the name resolves to. Trust is judged against the Debian CA bundle. SSL 3.0 is not tested, and cipher suites are sampled rather than enumerated.