Verify Your SSL, TLS & Ciphers
SSL verification is important to ensure your certificate parameters are displayed as expected. There are multiple ways to check SSL certificate, however testing through online tool provides you many useful information listed below. This also helps you in finding any issues in advance instead of user complaining about them.
I received few questions on my previous post – Apache Hardening & Security Guide about how to test TLS & SSL. In this article, I will talk about some of the useful online tool to test your SSL certificate.
Symantec SSL Toolbox
Check your CSR – it’s essential to check your CSR before sending for signing request. This gives you confirmation your CSR contains expected parameters like CN, DN, O, OU, Algorithm, etc.
Check certificate installation – after installation of signed certificate, it’s always good to verify your certificate is valid with required information. This online check CN, SAN, Organization, OU, City, Serial number, Algorithm type, Key size and certificate chain details.
Wormly Web Server Tester
Web Server Tester by Wormly provides you very good overview about your secure URL. This contains certificate overview (CN, Expiry details, Trust chain), Encryption Ciphers details, Public key size, Secure Renegotiation, Protocols like SSLv3/v2, TLSv1/1.2.
DigiCert SSL Certificate Checker
DigiCert SSL Installation Diagnostics Tool is another fantastic tool to provide you DNS resolves IP address, Certificate details including Issuer, Serial number, key length, signature algorithm, SSL cipher supported by the server and expiry details.
It’s useful if you are looking to verify what all ciphers your server supports.
SSL Checker by SSL Shopper is very handy tool to check quickly Server type, expiry details, SAN, and trusted chains. You can quickly find if your chain cert is broken or not installed properly. Good for troubleshooting purpose.
GlobalSign SSL Check
SSL Configuration Checker by GlobalSign provides you very detailed information about your web server & SSL. It gives you score based on certificate details, protocol support, key exchange & cipher strengthen. Qualys SSL labs power this tool. It becomes very essential tool if you are setting up a new secure URL or participating in auditing. You got to try this!
Qualys SSL Labs
Know your SSL Report, check how your website score in SSL certificate. Very detailed technical information; advisable to use for system administrator, auditor, web security engineer to know and fix for any weak parameters.
I believe above listed free online tool is sufficient to validate SSL certificate parameter and gives good technical information for auditing and compliance.