SSL/TLS Certificate Inspector & Expiry Monitor

Probe any domain or socket for real-time SSL/TLS certificate chains, expiration countdowns, Subject Alternative Names (SAN), TLS protocol negotiation, cryptographic key strength, and intermediate trust trees.

DNS Checker Password Generator

Target Hostname or Domain

Port

Quick Presets:

Certificate Signing Request (CSR) Decoder

Paste an unencrypted PEM-encoded CSR to inspect its subject, requested SANs, and key parameters before submitting to a CA

Feature List & Architecture

Cryptography & TLS

The NewhouseNet SSL/TLS Certificate Inspector executes real-time socket handshakes to dissect x509 public key certificates, monitor impending expirations, and audit cipher suite negotiations.

🔒 Native Stream Socket Probe Executes raw TLS handshakes via PHP stream_socket_client with SNI support, extracting full peer certificates without executing curl binaries or shell commands.

⏳ Expiration & Status Tracking Computes exact remaining calendar days with color-coded warning states for healthy (>30d), expiring soon (≤30d), and expired credentials.

🌲 Chain & SAN Decomposition Iterates through leaf, intermediate, and root CAs to display certificate hierarchy and parses all Subject Alternative Names (SANs) for multi-domain coverage.

🔑 Fingerprints & CSR Decoding Provides SHA-256 and SHA-1 hexadecimal fingerprints, raw PEM exports, and an integrated CSR inspector for validating pre-issuance certificate requests.