Built a Rust-based monitor for those missing the old expiration emails

Client dev
21

I tested your tools on my domain (zandoodle.me.uk) and here's my evaluation:

  1. Cert Log Search:
    Certradar was returning 502 so I couldn't test this tool thoroughly however your tool does try to make a post request to recaptcha which is blocked by your CSP.
  2. TLS Scanner:
    The renewal warning doesn't account for short-lived certificates
    Your tool doesn't disable TLS 1.3 or its default ciphers when attempting to connect so TLS 1.2 support isn't shown and your website reports that ciphers not supporting PFS are enabled when they are not.
    OCSP Stapling not being enabled is shown for certificates with no OCSP endpoint.
  3. Header Search:
    Appears to be correct, parses CSP headers and HSTS-Preload headers correctly
  4. Domain Health:
    I'm not sure what SSL Health is however I got an A+ so I guess it works
    CAA Analysis added an extra pair of quotes around all my records, it appears to have removed the lone semicolon from my issuewild record (";"), the flags field is parsed as little endian rather than big endian (a flags field with just the critical flag set should be 128).
  5. RDAP Lookup:
    Seems to work correctly.
  6. Multi-Domain Report:
    A useful aggregation for the other tests.
    Maybe consider disabling spellcheck (HTML Standard) for the domain input box.
3 Likes
22

Max, thanks for testing and for the feedback, I'll fix whatever isnt working tomorrow.

1 Like
23

If the certificate is already expired it omits the expiry date.

Also a grammar nitpick: "None days remaining" isn't gramatically correct. "No days remaining" or "0 days remaining" is.

There is also a bit of conflicting information where it says your certificate is invalid and then it says it looks good.

For expired.badssl.com for example:

image
image849×910 50.5 KB

1 Like
24

I fixed that, thank you for pointing this out

25

thank you, Mike. I fixed it.

26

You can also self host and check expiring certificates using a bash script.