We verify the certificate is current, not expired or self-signed, and has sufficient time before expiration.
What do we analyze?
Your report covers 6 key areas of your domain's SSL/TLS configuration.
We validate the complete certificate chain up to a recognized Certificate Authority (CA).
We check TLS 1.3 and 1.2 support and detect deprecated protocols like TLS 1.0 and SSL.
We evaluate the negotiated cipher suite: forward secrecy, authenticated encryption (AEAD), and absence of weak algorithms.
We check the HSTS header (Strict-Transport-Security), max-age, includeSubDomains, and preload directive.
We analyze SANs (Subject Alternative Names), key type and size, and the certificate's SHA-256 fingerprint.
How does it work?
Enter your domain
Provide the domain you want to analyze along with your name and email to receive the report.
TLS connection
We connect to port 443 of your server to obtain the negotiated certificate, protocol, and cipher suite.
Full analysis
We evaluate 6 categories: validity, trust chain, protocol, cipher, HSTS, and certificate transparency.
Get your report
Within seconds you'll receive a PDF in your email with scores by category, findings, and prioritized recommendations.
Frequently Asked Questions
A professional SSL/TLS analysis evaluates 6 areas: certificate validity (expiry, self-signing), trust chain (recognized CA), TLS protocol (1.3/1.2 vs deprecated), cipher suite (forward secrecy, AEAD), HSTS headers, and transparency details (SANs, key size). IQ Source's free analyzer covers all these categories.
Yes, IQ Source's SSL/TLS analyzer is 100% free with no strings attached. Enter your domain, and you'll receive a complete PDF report with per-category scores and recommendations directly in your email.
A complete SSL/TLS analysis takes 10 to 30 seconds. IQ Source's analyzer establishes a real TLS connection with the server, evaluates the certificate, protocol, and headers, then sends the report to your email within a minute.
A professional SSL/TLS report includes an overall score (0-100), grades for each of the 6 categories, specific findings on certificate, protocol, cipher, and HSTS, and recommendations prioritized by urgency to improve the configuration.
Yes, an online SSL analyzer only makes a standard TLS connection to the server — the same one any web browser would make. IQ Source's analyzer transmits your information encrypted, only uses your email to send the report, and doesn't store analysis results.
What comes next after this diagnostic?
Three concrete ways to move forward, each aligned to a different engagement model. Pick the one that matches where you are.
Talk to AI Maestro
If you need to discover where AI fits in your operation before building. Structured 2-month program with a Go/No-Go gate.
Request auditRequest a quote (Software)
If you already know what you need to build — web app, mobile, API, dashboard, or modernization. Monthly billing with deliverables every two weeks.
Quote projectTalk to a Tech Partner
If you need dedicated engineering capacity as an extension of your team. Monthly retainer, 3-month minimum, under your brand.
Explore partnership