TLSChecker

Experimental TLS/SSL certificate command-line checker

Docker run

DockerHub

docker run josebovet/tlschecker:v0.1.10 jpbd.dev

Install

Linux

curl -LO https://github.com/jbovet/tlschecker/releases/download/v0.1.10/tlschecker-linux
mv tlschecker-linux tlschecker
sudo install tlschecker /usr/local/bin/tlschecker

Osx

curl -LO https://github.com/jbovet/tlschecker/releases/download/v0.1.10/tlschecker-macos
mv tlschecker-macos tlschecker
sudo install tlschecker /usr/local/bin/tlschecker

➜ tlschecker --help
Experimental TLS/SSL certificate checker
Usage: tlschecker [OPTIONS] [ADDRESSES]...
Arguments:
[ADDRESSES]...
A space-delimited hosts list to be checked
Options:
-v, --verbose...
Enable verbose to see what is going on
-o <OUTPUT>
Enable verbose to see what is going on
[default: text]
Possible values:
- json: Enable JSON in the output
- text: Enable Text in the output
-h, --help
Print help (see a summary with '-h')
-V, --version
Print version

How to use

➜ tlschecker jpbd.dev expired.badssl.com
➜ ~ tlschecker jpbd.dev expired.badssl.com
--------------------------------------
Hostname: jpbd.dev
Issued domain: sni.cloudflaressl.com
Subject Name :
Country or Region: US
State or Province: California
Locality: San Francisco
Organizational Unit: None
Organization: Cloudflare, Inc.
Common Name: sni.cloudflaressl.com
Issuer Name:
Country or Region: US
Organization: Cloudflare, Inc.
Common Name: Cloudflare Inc ECC CA-3
Valid from: Jul 2 00:00:00 2022 GMT
Valid to: Jul 2 23:59:59 2023 GMT
Days left: 123
Expired: false
Certificate version: 2
Certificate algorithm: ecdsa-with-SHA256
Certificate S/N: 20332696690017175202539153893006852358
Subject Alternative Names:
DNS Name: sni.cloudflaressl.com
DNS Name: jpbd.dev
DNS Name: *.jpbd.dev
Additional Certificates (if supplied):
Chain #1
Subject: "sni.cloudflaressl.com"
Valid from: "Jul 2 00:00:00 2022 GMT"
Valid until: "Jul 2 23:59:59 2023 GMT"
Issuer: "Cloudflare Inc ECC CA-3"
Signature algorithm: "ecdsa-with-SHA256"
Chain #2
Subject: "Cloudflare Inc ECC CA-3"
Valid from: "Jan 27 12:48:08 2020 GMT"
Valid until: "Dec 31 23:59:59 2024 GMT"
Issuer: "Baltimore CyberTrust Root"
Signature algorithm: "sha256WithRSAEncryption"
--------------------------------------
Hostname: expired.badssl.com
Issued domain: *.badssl.com
Subject Name :
Country or Region: None
State or Province: None
Locality: None
Organizational Unit: Domain Control Validated
Organization: None
Common Name: *.badssl.com
Issuer Name:
Country or Region: GB
Organization: COMODO CA Limited
Common Name: COMODO RSA Domain Validation Secure Server CA
Valid from: Apr 9 00:00:00 2015 GMT
Valid to: Apr 12 23:59:59 2015 GMT
Days left: -2879
Expired: true
Certificate version: 2
Certificate algorithm: sha256WithRSAEncryption
Certificate S/N: 99565320202650452861752791156765321481
Subject Alternative Names:
DNS Name: *.badssl.com
DNS Name: badssl.com
Additional Certificates (if supplied):
Chain #1
Subject: "*.badssl.com"
Valid from: "Apr 9 00:00:00 2015 GMT"
Valid until: "Apr 12 23:59:59 2015 GMT"
Issuer: "COMODO RSA Domain Validation Secure Server CA"
Signature algorithm: "sha256WithRSAEncryption"
Chain #2
Subject: "COMODO RSA Domain Validation Secure Server CA"
Valid from: "Feb 12 00:00:00 2014 GMT"
Valid until: "Feb 11 23:59:59 2029 GMT"
Issuer: "COMODO RSA Certification Authority"
Signature algorithm: "sha384WithRSAEncryption"
Chain #3
Subject: "COMODO RSA Certification Authority"
Valid from: "May 30 10:48:38 2000 GMT"
Valid until: "May 30 10:48:38 2020 GMT"
Issuer: "AddTrust External CA Root"
Signature algorithm: "sha384WithRSAEncryption"
➜ ~

➜ tlschecker jpbd.dev -o json
[
{
"hostname": "jpbd.dev",
"subject": {
"country_or_region": "US",
"state_or_province": "California",
"locality": "San Francisco",
"organization_unit": "None",
"organization": "Cloudflare, Inc.",
"common_name": "sni.cloudflaressl.com"
},
"issued": {
"country_or_region": "US",
"organization": "Cloudflare, Inc.",
"common_name": "Cloudflare Inc ECC CA-3"
},
"valid_from": "Jul 2 00:00:00 2022 GMT",
"valid_to": "Jul 2 23:59:59 2023 GMT",
"validity_days": 123,
"is_expired": false,
"cert_sn": "20332696690017175202539153893006852358",
"cert_ver": "2",
"cert_alg": "ecdsa-with-SHA256",
"sans": [
"sni.cloudflaressl.com",
"jpbd.dev",
"*.jpbd.dev"
],
"chain": [
{
"subject": "sni.cloudflaressl.com",
"issuer": "Cloudflare Inc ECC CA-3",
"valid_from": "Jul 2 00:00:00 2022 GMT",
"valid_to": "Jul 2 23:59:59 2023 GMT",
"signature_algorithm": "ecdsa-with-SHA256"
},
{
"subject": "Cloudflare Inc ECC CA-3",
"issuer": "Baltimore CyberTrust Root",
"valid_from": "Jan 27 12:48:08 2020 GMT",
"valid_to": "Dec 31 23:59:59 2024 GMT",
"signature_algorithm": "sha256WithRSAEncryption"
}
]
}
]