Check an SSL certificate.

Enter a hostname. We open a TLS handshake from our edge, extract the leaf cert, and report issuer, expiry, SANs, and chain health. No account required. Nothing stored.