Has anyone found a good way to on-premise test SSL/TLS certs for many (100's) of sites on a regular basis?
The usecase is websites setup both internally, and with VPN tunnels to many customers, as such no internet-facing presence.
Things to check:
- does the cert match the dns/url name
- are all the intermediate certs accounted for
- is it expired
- is it signed by a trusted thirdparty site (commonly recognized by browsers)
- are there weak ciphers allowed