SSL/TLS Certificate Audit avatar

SSL/TLS Certificate Audit

Pricing

$150.00 / 1,000 completed audits

Go to Apify Store
SSL/TLS Certificate Audit

SSL/TLS Certificate Audit

A real TLS handshake graded A-F: days until expiry, chain validity, hostname match, protocol and cipher, issuer, SAN coverage. Expired, self-signed, and wrong-host certs each get a precise verdict. Schedule it to catch expiries early. Charged only on completed audits.

Pricing

$150.00 / 1,000 completed audits

Rating

0.0

(0)

Developer

Chris Arsenault

Chris Arsenault

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

6 days ago

Last modified

Share

A real TLS handshake and a graded verdict, in one call. Not an HTTP fetch that assumes the cert is fine — an actual handshake that checks the things that take sites down: days until expiry, whether the chain validates, whether the certificate matches the hostname, and the protocol and cipher negotiated.

What you get

{
"host": "example.com",
"grade": "A",
"days_until_expiry": 62.4,
"chain_valid": true,
"hostname_match": true,
"tls_version": "TLSv1.3",
"issuer": "Let's Encrypt",
"san_count": 2,
"issues": ["Certificate is valid, trusted, and not expiring soon."]
}

Expired, self-signed, wrong-host, and incomplete-chain certificates each get a precise grade F verdict naming the exact failure, so an agent asking "is this cert OK?" gets a real answer either way.

Use cases

  • Expiry monitoring: schedule it against your domains; alert when days_until_expiry drops below your threshold. A lapsed cert is one of the most common self-inflicted outages.
  • Vendor and acquisition due diligence: grade a target's TLS hygiene in seconds.
  • Agents verifying endpoints: confirm a service's certificate is valid before trusting it.

Honesty notes

  • One TLS handshake to host:443 (or the port you give); no data is sent, nothing is fetched.
  • A host that will not resolve or connect reports cleanly and you are not charged; billing is per completed audit (a bad certificate is a completed audit — that is the finding).

Built by 1450 Enterprises, alongside the Email Deliverability DNS Audit and Security Headers Audit.