We verify the certificate is current, not expired or self-signed, and has sufficient time before expiration.
What do we analyze?
Your report covers 6 key areas of your domain's SSL/TLS configuration.
We validate the complete certificate chain up to a recognized Certificate Authority (CA).
We check TLS 1.3 and 1.2 support and detect deprecated protocols like TLS 1.0 and SSL.
We evaluate the negotiated cipher suite: forward secrecy, authenticated encryption (AEAD), and absence of weak algorithms.
We check the HSTS header (Strict-Transport-Security), max-age, includeSubDomains, and preload directive.
We analyze SANs (Subject Alternative Names), key type and size, and the certificate's SHA-256 fingerprint.
How does it work?
Enter your domain
Provide the domain you want to analyze along with your name and email to receive the report.
TLS connection
We connect to port 443 of your server to obtain the negotiated certificate, protocol, and cipher suite.
Full analysis
We evaluate 6 categories: validity, trust chain, protocol, cipher, HSTS, and certificate transparency.
Get your report
Within seconds you'll receive a PDF in your email with scores by category, findings, and prioritized recommendations.
Frequently Asked Questions
A professional SSL/TLS analysis evaluates 6 areas: certificate validity (expiry, self-signing), trust chain (recognized CA), TLS protocol (1.3/1.2 vs deprecated), cipher suite (forward secrecy, AEAD), HSTS headers, and transparency details (SANs, key size). IQ Source's free analyzer covers all these categories.
Yes, IQ Source's SSL/TLS analyzer is 100% free with no strings attached. Enter your domain, and you'll receive a complete PDF report with per-category scores and recommendations directly in your email.
A complete SSL/TLS analysis takes 10 to 30 seconds. IQ Source's analyzer establishes a real TLS connection with the server, evaluates the certificate, protocol, and headers, then sends the report to your email within a minute.
A professional SSL/TLS report includes an overall score (0-100), grades for each of the 6 categories, specific findings on certificate, protocol, cipher, and HSTS, and recommendations prioritized by urgency to improve the configuration.
Yes, an online SSL analyzer only makes a standard TLS connection to the server — the same one any web browser would make. IQ Source's analyzer transmits your information encrypted, only uses your email to send the report, and doesn't store analysis results.
Does your certificate need attention?
Book a free consultation and we'll help you configure SSL/TLS correctly for your infrastructure.
Book a free consultation