{% extends "base.html" %}
{% import "tool_parts.html" as p %}
{% block title %}{% if result %}SSL certificate for {{ result.host }}: {{ result.verdict }}{% else %}Free SSL certificate check{% endif %}{% endblock %}
{% block desc %}{{ tool.desc }}{% endblock %}
{% block content %}
{{ p.head(tool) }}
{{ p.form(tool, input_value, 'example.com') }}
{{ p.error(error, url) }}
{% if result %}
{% set d = result.days_left %}
{% call p.verdict((d ~ 'd') if (d is not none and result.verified) else result.verdict, result.verdict_class, result.verdict ~ (' · ' ~ d ~ ' days left' if d is not none else ''), ('Expires ' ~ result.not_after|dt) if result.not_after else 'No expiry date found', 'https://' ~ result.host ~ (':' ~ result.port if result.port != 443 else ''), checked_at) %}
  <div class="actions" style="align-self:center">
    <span class="pill {{ 'ok' if result.verified else 'err' }}">{{ 'trusted' if result.verified else 'not trusted' }}</span>
    {% if result.tls_version %}<span class="pill {{ 'ok' if result.tls_version in ('TLSv1.2','TLSv1.3') else 'warn' }}">{{ result.tls_version }}</span>{% endif %}
  </div>
{% endcall %}
<div class="grid g2" style="align-items:start">
  <div class="panel">
    <h3 style="margin-top:0">Checks</h3>
    {{ p.passfail(result.rows) }}
    {% if result.problems %}<h3 style="margin:18px 0 6px">Problems</h3>{{ p.findings(result.problems) }}{% endif %}
  </div>
  <div class="panel">
    <h3 style="margin-top:0">Certificate</h3>
    <dl class="kv">
      <dt>Subject</dt><dd>{{ result.subject.commonName or '—' }}{% if result.subject.organizationName %} · {{ result.subject.organizationName }}{% endif %}</dd>
      <dt>Issuer</dt><dd>{{ result.issuer.organizationName or result.issuer.commonName or '—' }}{% if result.issuer.commonName and result.issuer.organizationName %} ({{ result.issuer.commonName }}){% endif %}</dd>
      <dt>Valid from</dt><dd>{{ result.not_before|dt }}</dd>
      <dt>Valid until</dt><dd><span class="{% if d is not none and d < 0 %}err{% elif d is not none and d <= 30 %}warn{% else %}ok{% endif %}">{{ result.not_after|dt }}{% if d is not none %} ({{ d }} days){% endif %}</span></dd>
      <dt>Serial</dt><dd class="mono" style="font-size:12px">{{ result.serial or '—' }}</dd>
      <dt>Protocol</dt><dd>{{ result.tls_version or '—' }}{% if result.cipher %} · <span class="mono" style="font-size:12px">{{ result.cipher }}</span>{% endif %}</dd>
      <dt>SANs ({{ result.sans|length }})</dt><dd>{% for n in result.sans[:40] %}<span class="pill" style="margin:0 4px 4px 0">{{ n }}</span>{% else %}—{% endfor %}{% if result.sans|length > 40 %}<span class="small dim">+{{ result.sans|length - 40 }} more</span>{% endif %}</dd>
    </dl>
  </div>
</div>
{{ p.share(share_url) }}
{{ p.others(tools, tool, url) }}
{% else %}
<div class="grid g3" style="max-width:900px;margin:0 auto">
  <div class="panel"><h3 style="margin-top:0">What we check</h3><p class="small muted" style="margin:0">Expiry date and days left, issuer, subject, every SAN, the negotiated TLS version and cipher, plus whether the chain is trusted, the hostname matches and the certificate is not self-signed or expired.</p></div>
  <div class="panel"><h3 style="margin-top:0">Why it matters</h3><p class="small muted" style="margin:0">An expired or mismatched certificate shows a full-page browser warning and breaks API clients. Let's Encrypt certificates last 90 days, so a broken renewal cron goes unnoticed until it's too late.</p></div>
  <div class="panel"><h3 style="margin-top:0">Try it on</h3><p class="small muted" style="margin:0"><a href="/tools/ssl-check?url=puzaricloud.in">puzaricloud.in</a> · <a href="/tools/ssl-check?url=expired.badssl.com">expired.badssl.com</a> · <a href="/tools/ssl-check?url=self-signed.badssl.com">self-signed.badssl.com</a></p></div>
</div>
{% endif %}
{{ p.cta(tool, url) }}
{% endblock %}