TLS Certificate Check Guide
Use RookTLS when you need a live certificate read and a quick headers grade, not a full cipher audit.
RookTLS connects once on port 443, reads the certificate chain, and scores HSTS, CSP, frame protection, and X-Content-Type-Options on the HTTPS response.
When to use this tool
Check expiry before a renewal window, after deploying a new cert, or when a user reports a browser trust warning. Compare the hostname on the certificate to the name you typed.
What the grade means
A valid certificate can still earn a low letter grade if security headers are missing. The grade is not a replacement for patching or for SSL Labs-style cipher review.
Limits
This is not SSL Labs. It does not iterate ciphers, test renegotiation, or scan historical grades. Use it as a fast live snapshot.