Hacker News Reader

Speculation ahead:

It didn't just check if a certificate is valid now, but whether the certificate, intermediary, CA (or anything in the chain) is about to expire soon.

It might have needed to poke deeper into OpenSSL than regular uses.

View on HN

You don’t need anything peculiar in OpenSSL to do that. I’ve been monitoring my ssl certs with a simple nodejs script (it just connects to get the cert details so generally less than a second per domain).

Perhaps their service also tested for deprecated ciphers/tls versions?

it did test supported cyphers and SSL versions, common vulnerabilities, etc... (SSLPing creator here)

Reply on news.ycombinator.com