リアルタイムTLSハンドシェイク：X.509信頼チェーンの検証、有効期限、SAN一覧、TLS 1.2/1.3プロトコル監査をエッジで実行。
Stateless edge execution • Zero database retention • No user tracking or behavioral profiling
Every network lookup executes inside a temporary, isolated V8 sandbox deployed across Cloudflare's global edge. Each isolate is instantiated on demand, parses public DNS or TLS socket records in transient RAM, returns the result stream, and terminates immediately.
IncogSay operates under a strict zero-retention guarantee. Target domains, submitted URLs, and user IP addresses are never written to disk, stored in relational databases, or logged in persistent files. We do not maintain historical query logs or link lookups to user identities.
All tools are completely free and functional without registration, user logins, or account creation. We never deploy invasive session fingerprints, third-party analytics trackers that capture input payloads, or behavioral profilers. Your queries remain ephemeral and anonymous.
調査したいドメイン名（例: example.com や api.example.com）を入力します。
「SSL証明書を確認」ボタンをクリックすると、エッジノードから対象ホストへのTLS接続テストが開始されます。
認証局（CA）、SAN（サブジェクト代替名）、有効期限の正確な日時を確認します。
残り日数をチェックし、中間CA証明書が正しく設定されているか確認します。
現代のインターネットにおいてHTTPS化は必須です。近年はLet's Encryptなどの普及により有効期間90日の証明書が主流となっています。有効期限切れを防ぐには、ACMEプロトコルによる自動更新と、外部からの定期的な有効性監査が不可欠です。
Every SSL diagnostic query performs a live cryptographic handshake with port 443 of the target hostname, evaluating certificate chain integrity, cipher negotiation, and Certificate Transparency logs.
Validates that the server serves the complete, ordered chain (End-Entity → Intermediate CA → Root CA), preventing mobile and Linux curl clients from failing due to AIA chasing gaps.
Verifies TLS 1.3 priority and confirms deprecation of insecure TLS 1.0 and 1.1 protocol suites. Ensures ECDHE key exchange ciphers for forward-secret session security.
Extracts all Subject Alternative Names (SANs) from the X.509 v3 extension. Detects common wildcard vulnerabilities where apex domains are omitted from *.domain.com certificates.
Cross-checks issuer fingerprints against public, tamper-evident Certificate Transparency logs to proactively flag unauthorized or rogue CA issuance events.
Common administrative and operational scenarios solved by this tool
With modern CAs issuing certificates valid for only 90 days, automated renewal hooks (Certbot, acme.sh) can silently fail due to DNS validation timeouts or rate limits. Real-time auditing surfaces expiration windows before production traffic is blocked.
While desktop Chrome caches intermediate CA certs, mobile browsers (iOS Safari, Android Chrome) and API clients strictly fail with SEC_ERROR_UNKNOWN_ISSUER if the server neglects to send the intermediate bundle. Our audit catches missing chain links instantly.
Verify that your certificate covers all required hostnames, apex domains, and subdomains (e.g. both example.com and www.example.com or api.example.com), preventing ERR_CERT_COMMON_NAME_INVALID errors across distributed microservices.
Confirm your web server enforces TLS 1.3 or strong TLS 1.2 with forward secrecy (ECDHE), while deprecating legacy TLS 1.0, TLS 1.1, and CBC ciphers to maintain strict compliance with PCI DSS 4.0, HIPAA, and SOC 2 transit standards.
Direct, peer-reviewed engineering answers to core deployment, troubleshooting, and compliance questions.
本ツールの入力フォームにドメイン名を入力して検索してください。約2秒で対象サーバーとTLSハンドシェイクを行い、証明書の有効期限、発行元CA、暗号化スイートを診断します。
主要ブラウザが「接続が安全ではありません」という警告画面を表示し、ユーザーのアクセスを遮断するため、アクセス数の急減やブランドの信頼性低下につながります。
ルート認証局とWebサーバーのサーバー証明書の間を結ぶ証明書です。中間証明書の配信が抜けていると、一部のスマートフォンやcurlコマンドで接続エラーが発生します。