TLS Cert Expiry Scanner
A read-only script that scans your fleet's listening TLS ports, extracts every cert in use, and produces a dated report ranking each by days-to-expiry, SANs, issuer, and chain health. Catches the self-signed cert your predecessor installed on the internal API three years ago before it breaks prod on a Sunday.
- ▸tls_scan.py — Main scanner; standard library only, no external dependencies
- ▸hosts.example.txt — Sample hosts file showing the host:port input format with commented service examples
- ▸report.example.csv — Pre-generated sample output showing all status labels (OK, WARN, EXPIRED, ERROR) across 12 realistic rows — know what you're reading before you run it
- ▸runbook.md — Step-by-step guide: prerequisites, flags, scheduling, reading the report, known limitations
- ▸README.md — One-page overview with 3-command quick start
## goes-well-with
From the same shelf
AI-Augmented IR Tabletop Exercise Kit
Run your first IR tabletop without hiring a red team.
ASTGL PowerCLI Automation Cookbook v1.0
14 production-ready PowerShell 7 scripts for vSphere admins — built for Broadcom VCF.PowerCLI, ships-to-vCenter ready.
MCP Server Setup Guide for Sysadmins
A hands-on guide for sysadmins and IT pros to deploy, configure, and secure local MCP servers — covering tool selection, auth patterns, network exposure controls, and integration with Claude Code and local LLMs.
## not-ready-to-buy
Take the field notes instead
One practical write-up a week from the same workbench these kits come from — plus reader pricing when new kits ship.