What does the SSL checker validate?
We validate the certificate chain, check expiration dates, verify the domain matches, and detect the TLS protocol version.
How many days notice before expiration?
The API returns daysRemaining so you can set your own thresholds. Common practice is to renew 30 days before expiration.
Does it check for vulnerabilities?
We check protocol versions (TLS 1.2+) and basic configuration. For deep vulnerability scanning, use dedicated security tools.
What if the certificate is self-signed?
Self-signed certificates will show as invalid since they're not trusted by public CAs. The details are still returned.
Can I check internal domains?
The API checks publicly accessible domains. Internal/private domains behind firewalls are not reachable.
Does it check all certificate types?
We support standard SSL/TLS certificates including DV, OV, and EV certificates from public certificate authorities.