[matthewmueller]

Would love a tool that checks your website for these problems.

[creshal]

https://www.ssllabs.com/ covers most (if not all?) server-side problems.

[loloquwowndueo]

I use sslcheck for this. https://pypi.org/project/sslcheck/

Badssl is good to see how clients react to a badly configured certificate, which is a different thing from checking whether your certificate or web site are badly configured.

[stayallive]

I felt the same so I've built https://cert.chief.app.

Also had to find another source for revoked test certificates for the homepage examples and found them here: https://www.ssl.com/sample-valid-revoked-and-expired-ssl-tls.... The badssl ones are expired too which means they are no longer revoked since revocation only lasts the lifetime of the certificates, which makes sense of course.

[jasoncartwright]

https://www.ssllabs.com/ssltest/

[wolfskaempf]

You’re in luck because such a tool exists :) https://testssl.sh/

[efortis]

https://Hardenize.com

Its founder, Ivan Ristić, has nice books as well.