justifycert 0.1.0

A minimal TLS certificate analysis CLI and library

justifycert

Fast, opinionated TLS certificate checks for developers.

What it checks

• Expired or expiring certificates
• Weak signature algorithms such as SHA1
• Self-signed certificates
• Missing Subject Alternative Name (SAN)
• Basic chain validation for domain lookups

Install

pip install .

Example

$ justifycert expired.badssl.com

✖ Certificate expired 10 days ago — renew immediately

Use

justifycert example.com
justifycert --file cert.pem
justifycert example.com --json

Library

from justifycert import analyze_domain, analyze_pem_file

result = analyze_domain("example.com")
print(result["valid"])
print(result["issues"])

The library returns a plain Python dictionary with:

{
    "valid": bool,
    "issues": [...],
    "subject": "...",
    "issuer": "...",
    "not_before": "...",
    "not_after": "...",
    "signature_algorithm": "...",
}