How to Use NMAP – A Comprehensive Guide: Basics to Advanced

If you’re looking for more, Fyodor, nmap’s author, has a whole book. Comes in handy if you want to scan a whole subnet for expired certs or ones not signed by your local certificate authority.