Certificate checks
Inspect hostname and chain validation, issuer, validity dates, public key, signature, and fingerprint. Invalid certificates are reported and rejected.
Inspect your server’s TLS connections, certificate chain, protocol negotiation, and negotiated cipher suites.
Try the SSL sample report — no external requests.
SAMPLE REPORT · ILLUSTRATIVE DATA
Validated connections observed
This report uses fabricated sample data. No external requests were made.
Resolved addresses: 192.0.2.10. Tests describe this server’s view at the time shown. A failed handshake is inconclusive about remote protocol support; local operating-system policy also affects results.
| Requested protocol | Result | Negotiated | Cipher suite |
|---|---|---|---|
| Automatic negotiation | Connected | TLS 1.3 | TLS_AES_256_GCM_SHA384 |
| TLS 1.0 | Inconclusive | — | Not negotiated |
| TLS 1.1 | Inconclusive | — | Not negotiated |
| TLS 1.2 | Connected | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
| TLS 1.3 | Connected | TLS 1.3 | TLS_AES_256_GCM_SHA384 |
Illustrative sample result; no network request was made.
Subject: CN=demo.example
Issuer: CN=Illustrative certificate authority
Subject alternative names: DNS:demo.example
Validation: None
Valid from: 2026-10-05 17:04 UTC
Expires: 2027-01-03 17:04 UTC
Public key: RSA 2048 bits
Signature: sha256RSA
SHA-256 fingerprint: SAMPLE — NOT A REAL CERTIFICATE FINGERPRINT
Illustrative sample result; no network request was made.
Illustrative sample result; no network request was made.
Illustrative sample result; no network request was made.
Subject: CN=demo.example
Issuer: CN=Illustrative certificate authority
Subject alternative names: DNS:demo.example
Validation: None
Valid from: 2026-10-05 17:04 UTC
Expires: 2027-01-03 17:04 UTC
Public key: RSA 2048 bits
Signature: sha256RSA
SHA-256 fingerprint: SAMPLE — NOT A REAL CERTIFICATE FINGERPRINT
Illustrative sample result; no network request was made.
Subject: CN=demo.example
Issuer: CN=Illustrative certificate authority
Subject alternative names: DNS:demo.example
Validation: None
Valid from: 2026-10-05 17:04 UTC
Expires: 2027-01-03 17:04 UTC
Public key: RSA 2048 bits
Signature: sha256RSA
SHA-256 fingerprint: SAMPLE — NOT A REAL CERTIFICATE FINGERPRINT
Revocation, exhaustive cipher support, SSL 2/3, client compatibility, and attacks such as Heartbleed or ROBOT are not tested. The chain uses this server’s trust store; intermediate-certificate downloads are disabled. No SSL Labs letter grade is assigned.
Reports are not stored. Use Print / Save as PDF to retain a result.
Inspect hostname and chain validation, issuer, validity dates, public key, signature, and fingerprint. Invalid certificates are reported and rejected.
Separate handshakes request TLS 1.0, 1.1, 1.2, and 1.3 alongside automatic negotiation. Successful legacy negotiation is flagged. No application data is sent.
This is Vulscore’s bounded local test, independent of Qualys. For its full assessment and grade, open Qualys SSL Labs and submit your hostname there.