TLSleuth

1.0.1

TLSleuth is a PowerShell module for quickly inspecting TLS/SSL endpoints and certificates.
It performs an SNI-aware TLS handshake, retrieves the server certificate, and returns a
structured report with protocol/cipher (as supported by the platform), certificate details,
SANs, AIA/CDP URLs, and optional chain/trust info.

TLSleuth is designed for automation and sc
TLSleuth is a PowerShell module for quickly inspecting TLS/SSL endpoints and certificates.
It performs an SNI-aware TLS handshake, retrieves the server certificate, and returns a
structured report with protocol/cipher (as supported by the platform), certificate details,
SANs, AIA/CDP URLs, and optional chain/trust info.

TLSleuth is designed for automation and scripting scenarios — not a full vulnerability scanner.
For deep TLS assessment (cipher enumeration, CVE checks, ALPN/HTTP2, resumption, etc.), use
tools like sslyze, sslscan, or testssl.sh.
Show more

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name TLSleuth

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name TLSleuth

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025 Mad Crab Cyder. All rights reserved.

Package Details

Author(s)

  • Mad Crab Cyder

Tags

TLS SSL X509 Certificate Security Handshake SChannel OpenSSL Networking PowerShell Windows Linux macOS

Functions

Get-TLSCertificate Get-TLSleuthCertificate

PSEditions

Core Desktop

Dependencies

This module has no dependencies.

Release Notes

- Initial release (1.0.0)
 * Get-TLSleuthCertificate: fetch TLS handshake + certificate details
 * Optional chain build and revocation check
 * Extract SANs, AIA, CRL Distribution Points
 * Structured, script-friendly output; verbose diagnostics
 * Pester tests with mocks; optional integration tests

FileList

Version History

Version Downloads Last updated
1.0.1 (current version) 7 9/6/2025
1.0.0 10 9/5/2025