General

Certificate Chain Validation is the process of verifying that an SSL/TLS certificate is authentic and trustworthy by checking its complete chain of trust back to a recognized Certificate Authority (CA). This validation ensures that each certificate in the chain is properly signed by its issuer and that the entire chain leads to a trusted root certificate installed in the client''s trust store.

The Certificate Expiration Date indicates the exact timestamp when an SSL/TLS certificate will cease to be valid and trusted by browsers and other client applications. After this date, the certificate enters an expired state and will trigger security warnings, potentially blocking access to the secured website or service.

The Certificate Issue Date represents the exact timestamp when the Certificate Authority (CA) digitally signed and issued the SSL/TLS certificate. This date marks the beginning of the certificate''s validity period and indicates when the certificate became active and ready for use in securing communications.

Certificate Revocation List (CRL) Status indicates whether an SSL/TLS certificate has been checked against the Certificate Authority''s revocation list and shows the current revocation status of the certificate. CRLs are digitally signed lists published by Certificate Authorities that contain the serial numbers of certificates that have been revoked before their natural expiration date.

Certificate Time Remaining represents the duration left before an SSL/TLS certificate expires, typically displayed in days, hours, or minutes depending on proximity to expiration. This metric provides a real-time countdown that helps administrators prioritize certificate renewals and avoid service disruptions caused by expired certificates.

Certificate Transparency Log Entries represent the specific records and metadata associated with a certificate''s inclusion in public Certificate Transparency logs. These entries provide detailed information about when, where, and how a certificate was logged, creating an immutable audit trail that enhances the security and transparency of the PKI ecosystem.

Certificate Transparency (CT) Log Status indicates whether an SSL/TLS certificate has been properly submitted to and recorded in public Certificate Transparency logs. CT is a security mechanism that creates publicly auditable records of all issued certificates, helping detect misissued or malicious certificates that could be used for attacks against encrypted communications.

The Current SSL/TLS Protocol refers to the specific version of the SSL/TLS protocol that was negotiated and is actively being used for the secure connection. This represents the agreed-upon protocol version between the client and server after the TLS handshake process, which may differ from the maximum protocol version supported by either party.

An End Entity Certificate, also known as a server certificate or leaf certificate, is the final certificate in the SSL/TLS certificate chain that is directly bound to the specific server, domain, or service being secured. This certificate contains the public key used for encrypting communications and the identity information that browsers and other clients use to verify they are connecting to the intended server.

The Last Checked timestamp indicates when the SSL/TLS certificate''s status and properties were most recently verified by the monitoring system. This timestamp is crucial for understanding the freshness of certificate data and ensuring that any changes or issues with the certificate are detected promptly.

OCSP (Online Certificate Status Protocol) Status provides real-time information about whether an SSL/TLS certificate has been revoked by its issuing Certificate Authority. Unlike Certificate Revocation Lists (CRLs) which are downloaded periodically, OCSP allows clients to query the CA''s OCSP responder in real-time to check the current status of a specific certificate.

A Self-Signed Certificate is an SSL/TLS certificate that is signed by the same entity that the certificate identifies, rather than by a trusted Certificate Authority (CA). In essence, the private key used to sign the certificate belongs to the same entity that the certificate represents, creating a certificate that vouches for its own authenticity.

Supported SSL/TLS Protocols represent the complete list of protocol versions that a server is configured to accept and negotiate with connecting clients. This configuration determines which clients can successfully establish secure connections and influences both security posture and compatibility with older systems.