What the SSL check shows
The tool connects to port 443 and reads the subject, issuer, start date, expiry, days left, protocol, cipher and the SAN list. Under 30 days uses a warning color. An expired certificate uses an error color.
A certificate does not mean the whole site is hardened. Mixed content, HSTS and redirects live on the security headers and HTTP tools.
| Field | What to look at |
|---|---|
| Subject (CN) | The name written on the certificate |
| Issuer | Let’s Encrypt, a commercial CA, or a CDN |
| Expiry and days left | Whether auto-renewal is working |
| Protocol | TLS 1.2 or 1.3 |
| SAN | Whether both www and the bare domain are listed |