Check a TLS certificate from a SIM
Check the TLS certificate a domain serves on the mobile network: issuer, validity dates and time left before expiry.
The TLS certificate is what puts the padlock in a browser's address bar. Check it from the cellular network to catch an expiring certificate before your users do, and to spot interception: a certificate that differs on the cellular path.
Parameters
| Parameter | Required | Description |
|---|---|---|
| Domain name | Yes | The domain whose certificate to check. |
Plus the shared connection settings.
Results and metrics
In the action report (result), for the certificate chain:
| Field | Description |
|---|---|
expire_in_seconds | Time remaining before expiry. The field to alert on. |
not_before, not_after | Validity window. |
issuer, subject | Who issued the certificate and for whom (common name, organization, country...). |
signature_algorithm, public_key_algorithm | Cryptographic algorithms in use. |
fingerprint_sha_256, fingerprint_sha_1, serial_number | Certificate identity, to detect substitution. |
dns_names | The domains the certificate covers. |
certificate_error | Any validation error encountered. |
In Analytics, each run feeds the certificate measurement with expire_in_seconds, the issuer and subject details, fingerprints, and duration_seconds, tagged by status, domain name, certificate error, and algorithms. Alert on expire_in_seconds to get ahead of renewals.
What's next?
Last updated on