🔒 SSL/TLS Check
Analyzes SSL/TLS certificates, certificate chains, expiration dates, and ciphers.
Guide & best practices
SSL/TLS Check for certificates and HTTPS security
Analyze certificate validity, chain health and TLS hardening without local tooling.
Typical use cases
Use it before launches, after certificate changes, when browser warnings appear or for recurring expiration and TLS configuration checks.
How the TLS analysis works
Balou queries the HTTPS endpoint server-side, evaluates certificate metadata, chain status, expiration and TLS signals, then turns them into prioritized findings.
HTTPS best practices
Enable TLS 1.2/1.3, serve a complete chain, renew early and combine the result with Security Header Check and Domain Health Score.
Frequently asked questions
What does the SSL Check test?
Certificate metadata, expiration, issuer, chain status and HTTPS/TLS configuration hints.
Why is the certificate chain important?
Missing intermediates can cause trust issues depending on client and platform.
Does it replace a penetration test?
No. It provides fast configuration diagnostics, not a full manual security audit.
Which tools complement it?
Security Header Check, CSP Evaluator and Domain Health Score.
Why does it say the certificate chain is incomplete?
Usually an intermediate certificate is missing; serve the full chain (leaf plus intermediates) on the server.
What is SAN and why is the CN not enough?
The Subject Alternative Name lists the valid hostnames; modern browsers validate SAN only, not the Common Name.
TLS 1.2 vs 1.3 – what should I disable?
Disable the outdated versions TLS 1.0 and 1.1 and offer only TLS 1.2 and 1.3.