Check SSL/TLS Certificate
Verify a domain's TLS certificate from the cellular network, including expiry.
Fetch and inspect the TLS certificate a domain serves, as seen from the mobile network: issuer, subject, validity dates, time before expiry. Catch an expiring certificate before your users do, and detect interception (a certificate that differs on the cellular path).
Parameters
| Parameter | Required | Description |
|---|---|---|
| Domain name | Yes | The domain whose certificate to check. |
Plus the shared connection settings.
Results and metrics
In the action report (result), for the certificate chain:
| Field | Description |
|---|---|
expire_in_seconds | Time remaining before expiry. The field to alert on. |
not_before, not_after | Validity window. |
issuer, subject | Who issued the certificate and for whom (common name, organization, country...). |
signature_algorithm, public_key_algorithm | Cryptographic algorithms in use. |
fingerprint_sha_256, fingerprint_sha_1, serial_number | Certificate identity, to detect substitution. |
dns_names | The domains the certificate covers. |
certificate_error | Any validation error encountered. |
In Analytics, each run feeds the certificate measurement with expire_in_seconds, the issuer and subject details, fingerprints, and duration_seconds, tagged by status, domain name, certificate error, and algorithms. Alert on expire_in_seconds to get ahead of renewals.
What's next?
Last updated on