TLS is everywhere these days (thankfully!), and while browsers do a pretty good job of letting you know when a cert is no good, sometimes you need to do it from the terminal. openssl s_client -connect $HOST:$PORT For example, for google.com we see This lets use see