SSL Certificate Checks Cover Three Distinct Systems, Not Just Expiry Dates

The phrase 'check my SSL cert' can refer to three separate concerns: domain registration expiry via WHOIS, unauthorised certificate issuance via transparency logs, or the live TLS certificate a server is actively presenting. A developer has built an open-source tool focused on the third case, which is the one most likely to cause a production outage when overlooked. The tool opens a direct TLS handshake to each target host and retrieves certificate details including issuer, validity dates, days until expiry, and trust status. It deliberately sets rejectUnauthorized to false not to bypass security checks, but to capture certificate data even when the chain is broken or the cert is self-signed, reporting trust issues as structured output rather than silent failures. The checker is available on GitHub and as a hosted Apify actor, and is billed per host regardless of the result returned.