Features

This chapter covers the core features and capabilities of SSL Certificate Manager.

Features

• Expiry checking: Scan multiple domains and report days until certificate expiry
• Chain validation: Verify complete certificate chain from leaf to root CA
• CSR generation config: Generate OpenSSL CSR configuration files from a JSON spec
• Renewal reminders: Flag certificates expiring within configurable threshold (default: 30 days)
• Bulk scanning: Check all your domains from a single config file
• JSON and text output formats for CI/CD integration
• Exit code 1 when any certificate is expired or near-expiry
• Python stdlib only — zero dependencies

Quick Start

Follow this guide to get SSL Certificate Manager up and running in your environment.

Quick Start

# Check SSL certificates for all configured domains
python src/ssl_manager.py check --config examples/ssl_config.json

# JSON output for CI/CD pipelines
python src/ssl_manager.py check --config examples/ssl_config.json --format json

# Generate a CSR config file
python src/ssl_manager.py csr --config examples/ssl_config.json --domain api.example.com

# Set custom expiry warning threshold (days)
python src/ssl_manager.py check --config examples/ssl_config.json --warn-days 60

# Check a single domain (no config file needed)
python src/ssl_manager.py check-one --domain api.example.com --port 443