SSL Certificate Check

{'type': 'object', 'required': ['url'], 'properties': {'url': {'type': 'string', 'pattern': '^https?://', 'description': 'Full public URL of the site to probe. Its hostname and explicit port drive the handshakes; port 443 is used when no port is named. The submitted scheme is reported, but the page is never fetched and plain-HTTP serving or redirects are not tested'}}, 'additionalProperties': False}

{'type': 'object', 'required': ['url', 'host', 'port', 'checkedAt', 'https', 'issues'], 'properties': {'url': {'type': 'string', 'description': 'The URL as requested'}, 'host': {'type': 'string', 'description': 'The hostname the handshakes were opened against'}, 'port': {'type': 'number', 'description': 'The port the handshakes were opened against (443 unless the URL named another)'}, 'https': {'type': 'boolean', 'description': 'Whether anything completed a TLS handshake on the port'}, 'issues': {'type': 'array', 'items': {'type': 'string'}, 'description': 'Protocol, certificate, and submitted-scheme observations found by the probe'}, 'checkedAt': {'type': 'string', 'description': 'Probe timestamp'}, 'protocols': {'type': 'object', 'required': ['tls13', 'tls12', 'tls11', 'tls10', 'ssl3'], 'properties': {'ssl3': {'type': 'boolean', 'description': 'Obsolete SSLv3 still accepted'}, 'tls10': {'type': 'boolean', 'description': 'Deprecated TLS 1.0 still accepted'}, 'tls11': {'type': 'boolean', 'description': 'Deprecated TLS 1.1 still accepted'}, 'tls12': {'type': 'boolean', 'description': 'TLS 1.2 accepted'}, 'tls13': {'type': 'boolean', 'description': 'TLS 1.3 accepted'}}, 'description': 'Protocol versions the server agreed to speak', 'additionalProperties': False}, 'certificate': {'type': 'object', 'required': ['names'], 'properties': {'names': {'type': 'array', 'items': {'type': 'string'}, 'description': 'DNS names and IP addresses from subjectAltName; the subject common name is display-only'}, 'issuer': {'type': 'string', 'description': 'Issuing CA distinguished name'}, 'expired': {'type': 'boolean', 'description': 'Whether the certificate is already past its notAfter'}, 'subject': {'type': 'string', 'description': 'Certificate subject distinguished name'}, 'issuedAt': {'type': 'string', 'description': 'Certificate notBefore as an ISO 8601 timestamp (when this certificate became valid, which is what confirms a renewal is the one being served)'}, 'expiresAt': {'type': 'string', 'description': 'Certificate notAfter as an ISO 8601 timestamp'}, 'expiringSoon': {'type': 'boolean', 'description': 'Whether the certificate expires within 30 days'}, 'daysUntilExpiry': {'type': 'number', 'description': 'Rounded days until expiry; use expired for the exact validity state because an expiry within twelve hours can round to zero'}, 'hostnameMatches': {'type': 'boolean', 'description': 'Whether a DNS subjectAltName matches the probed hostname or an IP subjectAltName matches the probed IP address'}}, 'description': 'The certificate the server served during the handshake', 'additionalProperties': False}, 'protocolGrade': {'type': 'string', 'description': 'A+ (TLS 1.3, no legacy protocols), A, B, or C: read from protocol support ALONE by this app. It ignores the certificate entirely, so an expired or wrong-hostname certificate can still sit behind an A. Not a Qualys SSL Labs grade'}, 'servedOverHttp': {'type': 'boolean', 'description': 'Legacy field name: true when the submitted URL used the http scheme and TLS answered on the probed port. It records the input scheme in this TLS result, not whether HTTP content is served, redirected or enforced'}}, 'additionalProperties': False}