tls-certificate-analysis

Extracts TLS certificate metadata, issuer, SANs, and JARM fingerprints.

7|1|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill tls-certificate-analysis-arianhobson333
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tls-certificate-analysis
Source: https://github.com/ArianHobson333/claude-bug-bounty-stack/tree/main/vendor/communitytools/projects/pentest/.claude/skills/techstack-identification/tls_certificate_analysis
Command: npx skills add https://github.com/ArianHobson333/claude-bug-bounty-stack --skill tls-certificate-analysis-arianhobson333

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires openssl, jarm, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies and analyzes TLS certificates to determine the certificate authority, subject alternative names, and generate fingerprints for technology identification.

Core Features & Use Cases

  • Certificate Metadata Extraction: Extracts issuer information, SANs, and other metadata from TLS certificates.
  • Issuer Identification: Identifies the certificate authority and infers hosting/security practices.
  • Protocol Support Analysis: Tests TLS protocol and cipher support.
  • JARM Fingerprinting: Generates JARM fingerprints for server identification.
  • Use Case: Use this Skill to analyze the TLS certificate of a web server to determine the hosting provider and security posture.

Quick Start

Analyze the TLS certificate of the domain 'example.com' using the 'tls-certificate-analysis' skill.

Frequently Asked Questions about tls-certificate-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract the certificate authority and SANs from a TLS certificate?

To extract the certificate authority and SANs from a TLS certificate, you can use automated analysis tools. This process identifies the issuer and subject alternative names to infer hosting and security practices.

What is JARM fingerprinting and how does it identify servers?

JARM fingerprinting is a technique that generates a unique hash from TLS server handshake characteristics. It actively identifies server software and technology stacks by analyzing specific TLS responses.

How do I test TLS protocol and cipher support for a web server?

You can test TLS protocol and cipher support by analyzing the server's handshake response. This verifies the server configuration by identifying which specific TLS protocols and ciphers are accepted.

Do I need OpenSSL and JARM installed to analyze TLS certificates?

Yes, you need OpenSSL and JARM installed to analyze TLS certificates using this method. These dependencies are required to actively extract metadata and generate server fingerprints.

Can I use TLS certificate analysis for penetration testing and security audits?

You can use TLS certificate analysis for penetration testing and security audits. It evaluates server security posture by extracting certificate authorities, verifying protocol support, and generating JARM fingerprints.