Live3 free inspections/day · Unlimited with Pro
SSL / TLS Inspector
Real TLS handshake — checks certificate expiry, cipher strength, protocol version, and security headers. No external scan APIs. Direct socket connection to your server.
How it works
Connects directly to your server and performs a real TLS handshake — the same way a browser would. Reads the actual certificate chain, checks expiry, detects deprecated protocols (TLS 1.0/1.1), and inspects your HTTP security headers. No third-party APIs — raw socket connection to port 443.
What you get
- ✓Certificate issuer, expiry date, and days remaining
- ✓TLS protocol version (1.2 vs 1.3) and cipher suite
- ✓Security header audit: HSTS, CSP, X-Frame-Options
- ✓Overall grade: A+ to F with specific issues
- ✓Subject Alternative Names (SANs) — all domains on the cert