All tools
SSL / TLS certificate inspector
Web & HTTP
Read the TLS certificate a host presents — subject, issuer, expiry, SAN list, and fingerprint. Connected server-side; private and internal hosts are refused.
Hostname
Opens a TLS connection server-side (port 443 unless you specify one) and reads the presented certificate. Public hosts only — private and internal addresses are refused.