실시간 TLS 핸드셰이크: X.509 신뢰 체인 검증, 만료일 카운트다운, SAN 목록화 및 TLS 프로토콜 감사.
Stateless edge execution • Zero database retention • No user tracking or behavioral profiling
Every network lookup executes inside a temporary, isolated V8 sandbox deployed across Cloudflare's global edge. Each isolate is instantiated on demand, parses public DNS or TLS socket records in transient RAM, returns the result stream, and terminates immediately.
IncogSay operates under a strict zero-retention guarantee. Target domains, submitted URLs, and user IP addresses are never written to disk, stored in relational databases, or logged in persistent files. We do not maintain historical query logs or link lookups to user identities.
All tools are completely free and functional without registration, user logins, or account creation. We never deploy invasive session fingerprints, third-party analytics trackers that capture input payloads, or behavioral profilers. Your queries remain ephemeral and anonymous.
확인하려는 도메인 또는 호스트네임(예: example.com 또는 api.example.com)을 입력합니다.
'SSL 인증서 검사' 버튼을 눌러 엣지 노드에서 실시간 TLS 연결을 시작합니다.
발급 기관(CA), 등록된 SAN 도메인 목록, 만료 일시를 확인합니다.
남은 기간을 확인하고 중간 인증서 누락으로 인한 모바일 접속 장애 여부를 점검합니다.
웹 서버 설정 시 중간 인증서 번들(fullchain.pem)을 누락하는 경우가 많습니다. 데스크톱 브라우저는 이를 자체 캐시로 보완하기도 하지만, 모바일 기기나 백엔드 API 클라이언트는 즉시 연결 오류(CERTIFICATE_VERIFY_FAILED)를 발생시킵니다.
Every SSL diagnostic query performs a live cryptographic handshake with port 443 of the target hostname, evaluating certificate chain integrity, cipher negotiation, and Certificate Transparency logs.
Validates that the server serves the complete, ordered chain (End-Entity → Intermediate CA → Root CA), preventing mobile and Linux curl clients from failing due to AIA chasing gaps.
Verifies TLS 1.3 priority and confirms deprecation of insecure TLS 1.0 and 1.1 protocol suites. Ensures ECDHE key exchange ciphers for forward-secret session security.
Extracts all Subject Alternative Names (SANs) from the X.509 v3 extension. Detects common wildcard vulnerabilities where apex domains are omitted from *.domain.com certificates.
Cross-checks issuer fingerprints against public, tamper-evident Certificate Transparency logs to proactively flag unauthorized or rogue CA issuance events.
Common administrative and operational scenarios solved by this tool
With modern CAs issuing certificates valid for only 90 days, automated renewal hooks (Certbot, acme.sh) can silently fail due to DNS validation timeouts or rate limits. Real-time auditing surfaces expiration windows before production traffic is blocked.
While desktop Chrome caches intermediate CA certs, mobile browsers (iOS Safari, Android Chrome) and API clients strictly fail with SEC_ERROR_UNKNOWN_ISSUER if the server neglects to send the intermediate bundle. Our audit catches missing chain links instantly.
Verify that your certificate covers all required hostnames, apex domains, and subdomains (e.g. both example.com and www.example.com or api.example.com), preventing ERR_CERT_COMMON_NAME_INVALID errors across distributed microservices.
Confirm your web server enforces TLS 1.3 or strong TLS 1.2 with forward secrecy (ECDHE), while deprecating legacy TLS 1.0, TLS 1.1, and CBC ciphers to maintain strict compliance with PCI DSS 4.0, HIPAA, and SOC 2 transit standards.
Direct, peer-reviewed engineering answers to core deployment, troubleshooting, and compliance questions.
도메인 이름을 입력창에 입력하면 2초 이내에 실제 TLS 핸드셰이크를 수행하여 만료일, 발급 기관, 암호화 프로토콜 버전을 분석해 드립니다.
브라우저가 보안 경고 화면을 표시하며 방문자의 접속을 차단하여 브랜드 신뢰도와 웹사이트 트래픽에 치명적인 타격을 줍니다.