How the check works
-
Certificate + expiry
We fetch the leaf certificate, verify the chain, read issuer + subject, and surface the days-to-expiry risk on a single line.
-
Protocols + ciphers
Advertised TLS versions and cipher strength are summarized with explicit callouts for anything below TLS 1.2 and for any weak-cipher matches.
-
No persistence
Submitted hostnames are never logged, cached, or shared. Results live only in the current browser session.