17 ms·
Speculation ahead: It didn't just check if a certificate is valid now, but whether the certificate, intermediary, CA (or anything in the chain) is about to exp
by perlgeek 5y ago
Speculation ahead:
It didn't just check if a certificate is valid now, but whether the certificate, intermediary, CA (or anything in the chain) is about to expire soon.
It might have needed to poke deeper into OpenSSL than regular uses.
- dan1234 5y agoYou don’t need anything peculiar in OpenSSL to do that. I’ve been monitoring my ssl certs with a simple nodejs script (it just connects to get the cert details so generally less than a second per domain). Perhaps their service also tested for deprecated ciphers/tls versions?
- weddpros 5y agoit did test supported cyphers and SSL versions, common vulnerabilities, etc... (SSLPing creator here)