Certificate & Encryption Check – SSL/TLS Expiry and Configuration
By purchasing you agree to our Terms of Service, including your responsibility to run scans only against systems you own or are authorised in writing to test.
An expired certificate takes your site down and tells every visitor you are not to be trusted. It is also completely preventable.
The Certificate & Encryption Check inspects the certificate and encryption configuration on any domain you own and returns a plain-English verdict. Free expert tools will give you a technical grade; this gives you a report that says what is wrong, why it matters and what to do, in language you can forward to whoever manages your hosting.
What it checks
- Certificate validity, expiry date and how many days you have left
- Who issued the certificate and whether the chain of trust is complete
- Hostname mismatches — a certificate issued for the wrong name
- Self-signed and untrusted certificates
- Which TLS protocol versions the server still accepts, including obsolete ones
- Cipher strength and weak encryption still enabled
- Whether the certificate covers the subdomains you actually use
What you get
- A written PDF report emailed back to you, typically within one business day.
- Every finding rated Critical / High / Medium / Low, with renewal dates called out.
- Plain-English fix instructions you can pass to a host or developer.
- A "what was checked" appendix that states the limits of the scan honestly.
- Reporting built to CompTIA Security+ and PenTest+ practice standards.
Who it's for
Anyone responsible for one or more domains who has been surprised by a certificate expiry before, and anyone who wants a cheap first look before committing to a larger scan.
Requirements
- Windows 10 or Windows 11
- Run as administrator
- An internet connection
- The domain name you want checked
- About 3 minutes
What this is not
QuickScan is detection and advisory only. It performs a normal encrypted connection and reads what the server presents; it never logs in, never exploits a weakness, and changes nothing. It is not a certification, an audit or an attestation.
One-time purchase. No subscription, no auto-renewal. Your report is prepared with AI-assisted analysis under ThreatVector's security review protocols and checked against our false-positive triage rules before it is sent. Reports are produced by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.
TommyGun is developed by ThreatVector LLC. Reporting mechanisms and cybersecurity customer service are powered by ThreatVector LLC. ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.