script-bundle

TLS Cert Expiry Scanner

A read-only script that scans your fleet's listening TLS ports, extracts every cert in use, and produces a dated report ranking each by days-to-expiry, SANs, issuer, and chain health. Catches the self-signed cert your predecessor installed on the internal API three years ago before it breaks prod on a Sunday.

A read-only script that scans your fleet's listening TLS ports, extracts every cert in use, and produces a dated report ranking each by days-to-expiry, SANs, issuer, and chain health. Catches the self-signed cert your predecessor installed on the internal API three years ago before it breaks prod on a Sunday.

What's Inside

  • πŸ“¦tls_scan.py β€” Main scanner; standard library only, no external dependencies
  • πŸ“¦hosts.example.txt β€” Sample hosts file showing the host:port input format with commented service examples
  • πŸ“¦report.example.csv β€” Pre-generated sample output showing all status labels (OK, WARN, EXPIRED, ERROR) across 12 realistic rows β€” know what you're reading before you run it
  • πŸ“¦runbook.md β€” Step-by-step guide: prerequisites, flags, scheduling, reading the report, known limitations
  • πŸ“¦README.md β€” One-page overview with 3-command quick start
$17

One-time purchase

⚑Instant download after purchase
πŸ“§Download link sent to your email
πŸ”„7-day download access
βœ…14-day money-back guarantee
View refund policy
Quality Score

9/10