Sslcheck allows you to check ssl keys with or without DNS resolution. The company I work for requires that all servers have different ssl keys. So if you've got two, four or more servers that sit behind a load balancer, it makes it hard to inspect the keys on each server individually as the load balancer is where the DNS name for that SSL key resides.
Sslcheck takes two parameters -i -p -d . The -i is optional, and if it's passed sslcheck will not perform any dns lookups, while the -d is manditory. The -p is for servers that might be running on a port other than 443.
Sslcheck is written in Go and should compile without the need of additional packages.
] $ ./sslcheck -d www.google.com
Client connected to: 74.125.137.99:443
Cert Checks OK
Server key information:
CN: www.google.com
OU: []
Org: [Google Inc]
City: [Mountain View]
State: [California]
Country: [US]
SSL Certificate Valid:
From: 2011-10-26 00:00:00 +0000 UTC
To: 2013-09-30 23:59:59 +0000 UTC
Valid Certificate DNS:
www.google.com
Issued by:
Thawte SGC CA
[]
[Thawte Consulting (Pty) Ltd.]Client connected to: [2607:f8b0:4002:801::1001]:443