justifycert

Fast, opinionated TLS certificate checks for developers.

What it checks

• Expired or expiring certificates
• Weak signature algorithms such as SHA1
• Self-signed certificates
• Missing Subject Alternative Name (SAN)
• Basic chain validation for domain lookups

Install

pip install justifycert

Example

$ justifycert expired.badssl.com

✖ Certificate expired — renew immediately

Use

justifycert example.com
justifycert --file cert.pem
justifycert example.com --json

Library Usage

from justifycert import analyze_cert

result = analyze_cert("google.com")
print(result["valid"])

Development

Install build and publishing tools:

pip install build twine

Build the package:

python -m build

Upload to PyPI:

twine upload dist/*