inspect-certificate

• Install
  • Brew
  • Docker
  • Pre-compiled binaries
• Usage
• Why?

Zero-dependency Go CLI for TLS certificate inspection.

Install

go install github.com/meysam81/inspect-certificate@latest

Brew

brew install meysam81/tap/inspect-certificate

Docker

docker run --rm meysam81/inspect-certificate google.com

Pre-compiled binaries

Or download a pre-built binary from the releases page.

Usage

# Quick check with expiration status
$ inspect-certificate meysam.io
Subject:     meysam.io
Issuer:      C=US, O=Let's Encrypt, CN=R13
Valid From:  Dec 10 2025 19:16:11 UTC
Valid Until: Mar 10 2026 19:16:10 UTC
Status:      Valid (67 days left)
DNS Names:   meysam.io
Serial:      05:44:f6:d1:df:57:c9:1e:3b:98:e0:17:c4:5c:1e:0a:b9:2f

# Detailed OpenSSL-style output
$ inspect-certificate --format=openssl meysam.io

Why?

Because openssl s_client -connect example.com:443 </dev/null 2>/dev/null | openssl x509 -text -noout is too much to type.