Expiry visibility
Reports each endpoint's UTC expiration time and whole days remaining against clear warning and critical thresholds.
Day 043 / DevOps / TLS
SSL Expiry Reporter
/ Overview
A dependency-free Python CLI that verifies TLS endpoints and reports certificate-expiry status with bounded, automation-friendly output.
An otherwise healthy service can still be approaching certificate expiration. Checking dates manually across several endpoints is easy to postpone, while a useful reminder must not weaken TLS verification, scan unknown systems or expose certificate details unnecessarily.
/ Provided servicesClear thinking.
Clear thinking.
Practical delivery.
Verified connections
Uses the operating environment's default trust store and hostname verification without an insecure bypass mode.
Operational boundaries
Checks only the supplied endpoint list, caps list size and timeout, sanitizes failures and performs no renewal or configuration changes.
/ Solution
SSL Expiry Reporter connects only to a small explicit endpoint list, uses Python's default trusted certificate authorities and hostname verification, classifies remaining validity against configurable warning and critical thresholds, and emits readable or JSON output. Connection failures are sanitized, input is bounded and the tool never renews certificates or changes services.
/ Impact
Verified TLS and hostname checks
Healthy, warning, critical and expired states
Sanitized connection-error reporting
Up to 20 explicit endpoints
Bounded 0.1–30 second timeout
Configurable expiry thresholds
Text and JSON output
Twelve network-free standard-library tests
Python standard library
SSL, socket, datetime, argparse and JSON provide the complete dependency-free command-line workflow.
TLS certificate metadata
Uses the verified peer certificate's notAfter field solely to calculate and classify remaining validity.
Unittest
Twelve tests cover endpoint parsing, limits, expiry boundaries, threshold validation, sanitized errors and CLI JSON behavior without contacting the network.