Demo — no TLS handshake is performed; a previously captured result is shown
Sample result. These findings are real output from scanning example.com on 2026-09-13. Your own input was not scanned, and nothing you enter here leaves your browser.
Live access is by invitation. Verify an approved email to run this page against your own target, or ask for access.
What gets checked
Certificate
Expiry date, issuer, key size, SANs, self-signed detection
TLS version
TLS 1.3 / 1.2 / 1.1 / 1.0 — flags deprecated versions
Cipher suite
Cipher name and key strength — flags weak ciphers
HSTS
Header presence, max-age, includeSubDomains, preload flag
CAA records
Which CAs are authorised to issue certificates for this domain
Chain trust
Whether the certificate chain is trusted by system roots