Skip to content
AdminToolsSmall tools. Clear answers.

SERVER DIAGNOSTIC / ONE PUBLIC TARGET

SSL/TLS Analyzer

Inspect a public server's certificate chain and TLS 1.2/1.3 handshakes, then understand trust, name and validity failures with suggested next steps.

Choose a public target

Enter a host without a URL or path. Private and server infrastructure addresses are blocked.

No diagnostic has been run.

Observed result

Submit one public target. Results will appear here.

What this inspection tells you

Use this tool to inspect the presented certificate's subject, issuer, DNS/IP SANs, fingerprint, and expiry, and see whether this server can complete TLS 1.2 and TLS 1.3 handshakes. One validated address from the full DNS answer set is tested. The certificate chain shown comes from the first completed probe. A failure on that address does not establish the behavior of other addresses for the hostname.

Invalid certificates can be inspected without sending HTTP data or credentials. Trust is evaluated separately against this server's certificate store and target name. A failed probe does not prove a protocol is unsupported; filtering and connection failures can prevent a handshake.

This check does not test revocation, TLS versions older than 1.2, every supported cipher, or browser compatibility. No certificate or private key is generated, and no diagnostic history is stored.

Local tools run in this browser. Network checks use this service.