tlsx
Fast and configurable TLS grabber focused on TLS based data collection and analysis. tldr-pages
On several platforms
Several platforms
Display TLS version and cipher of one or more hosts
tlsx -host host1,host2,... -tls-version -cipherIdentifyEnumerate and display supported TLS versions and ciphers of a host
tlsx -host host -version-enum -cipher-enumIdentifyScan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates
tlsx -list path/to/hosts.txt -expired -self-signed -mismatched -revoked -untrustedIdentifyAdjust per host concurrency, timeout, retry, and delay parameters when scanning a list of hosts for wildcard SSL certificates
tlsx -list path/to/hosts.txt -concurrency 300 -timeout 5 -retry 3 -delay 200ms -wildcard-certIdentifyDisplay unique hostname(s) from SSL certificate response
tlsx -host host -dnsIdentifyDisplay Subject Alternative Names (SANs) from the TLS certificate of a host, with JSON output written to a file
tlsx -host host -san -json -output path/to/file.jsonIdentifyPerform a self health-check of tlsx itself
tlsx -health-checkIdentify