TLS Health Check

Scan a live host for certificate health, protocol/cipher configuration, and known misconfigurations — optionally compared against a candidate CSR before renewal.