SSL Certificate Checker for HTTPS Audits

This tool checks public SSL/TLS certificates for domains, URLs, and host:port endpoints. It is designed for various use cases including expiry monitoring, security audits, SEO checks, client website reviews, and portfolio health reports.

Key features include:

• Bulk checking of public HTTPS endpoints.
• Acceptance of bare domains, full HTTPS URLs, and explicit host:port values.
• Normalization of targets to host and port for checking.
• Flagging of certificates that are valid, expired, expiring soon, untrusted, self-signed, or hostname-mismatched.
• Extraction of issuer, subject, validity dates, serial number, SHA-256 fingerprint, SANs, and certificate chain details.
• Recording of negotiated TLS protocol and cipher data.
• Checking of HTTP-to-HTTPS redirect posture and HSTS headers.
• Saving a dataset row for each endpoint that provides usable certificate, TLS, or HTTPS posture data.

The Actor provides detailed data points such as certificate validity, expiry status, trust status, hostname match, issuer information, subject details, serial number, SHA-256 fingerprint, Subject Alternative Names (SANs), certificate chain, TLS protocol, cipher suite, HTTP redirects to HTTPS, HSTS headers, and any identified issues.

It is built using technologies like Apify, JavaScript, Python, and TypeScript, leveraging the Crawlee library for web scraping and crawling.