Workflow

TLS Advisor

Inspect the certificate chain that a host actually presents, surface supported TLS versions, and turn chain problems into exact repair steps with certificate identifiers.

Start with one host for the full endpoint inspection, then add more hosts or upload a plain-text list when you want the bulk comparison path.

Analyze

Inspect one host or queue a same-domain batch

Use the first field for a quick single-host check. Add more hosts below or upload a list and the analyzer switches to bulk automatically.

Primary host or URL

Additional hosts or URLs Upload a plain-text host list The uploaded list is appended into the additional hosts box so you can review it before running analysis.

One unique host runs the detailed endpoint view. Two or more unique hosts switch to the bulk workflow automatically.

Bulk runs currently support up to 25 unique hosts under the same parent domain.

Upload a plain-text file with one hostname or URL per line if you do not want to paste the list manually.

Read chain remediation

Current checks

Incomplete chain Detect missing intermediates and trust failures.
Chain order mismatch Catch leaf/intermediate ordering issues that break validation.
Unnecessary root anchor Flag roots included in the sent chain.
Supported TLS versions Call out accepted and rejected protocol versions directly.
Observed ciphers Surface the negotiated cipher for each supported TLS version probe.
CAA policy Check whether DNS CAA policy exists and whether it authorizes the current certificate authority.
Same-domain bulk runs Paste or upload up to 25 hosts under one parent domain and keep the noisiest findings at the top.

Run a check to populate the full single-host inspection, or add more targets to see the bulk issue summary and saved comparison state.