Check certificate, issuer, SANs and remaining lifetime.

For publicly reachable HTTPS domains, the tool reads the live certificate via SNI.

Checks

Issuer SAN Expiration Signature