SSL/TLS Check

Checks your domain's HTTPS setup with a real TLS handshake to port 443.

Check	What is checked
Certificate validity	Is the certificate issued by a trusted CA and is the chain complete? Self-signed or expired certificates ⇒ fail.
Expiry date	Remaining validity: ≥ 30 days ok, < 30 days warn, < 14 days or expired fail.
TLS version	Negotiated version: TLS 1.3/1.2 ok, TLS 1.1/1.0 warn, SSLv3 fail.
HSTS	Strict-Transport-Security header: max-age ≥ 1 year ok, shorter or missing warn.
HTTP redirect	Does http:// cleanly redirect to https:// (301/302/307/308)?

The certificate chain in detail

Vernax shows the complete chain from the leaf certificate to the root CA certificate from the system trust store — with issuer, algorithm, validity period and, for ECDSA certificates, the real signature values (r, s) and the public key.

Explain mode: cryptography you can touch

The explain mode shows, using your own certificate as an example, how a signature chain works — including the actual hex values from the handshake. Not textbook examples, but your data.