TLS endpoint inspector

Handshake a public hostname on 443 and show the leaf, chain length, SANs and notAfter. Private and loopback addresses are rejected.

Privacy

We open a short TLS connection from this application. We do not store the PEM. This is not a vulnerability scanner.