SSL Scanner & Padlock Inspector

Certificate Expiration & Validity

Valid and within active lifespan.

Common Name & SANs Match

Requested domain matches certificate SAN list.

Intermediate Certificate Chain

Chained to a trusted root CA recognized by browsers.

Cryptographic Signature & Key Strength

Using strong SHA-256 / RSA 2048+ or ECC signatures.

Mixed Content & Insecure Elements

No unencrypted http:// resources disrupting the secure padlock.

HTTP Strict Transport Security (HSTS)

Enforces strict HTTPS and prevents SSL stripping attacks.