Rookstamp / Public signal 01

Public surface / TLS

Check the certificate buyers can see.

Enter a public DNS hostname to see a certificate-based readiness score plus SPF and DMARC findings for the company domain.

The score remains certificate-only. SPF is checked at the submitted domain and DMARC at _dmarc.<domain>. This is not an HTTP security-header scan, full TLS configuration scan, vulnerability test, or compliance verdict.

Single-host inspection

TLS + DNS readiness check

Port 443

Get a preliminary TLS/SSL readiness score from certificate validity, expiry, hostname, and trust-chain findings, plus separate SPF and DMARC checks. SPF is read at the scanned hostname; DMARC is read at its _dmarc. hostname. The check usually finishes in a few seconds and times out after five seconds. It is guidance, not a formal audit.

Use a hostname such as app.example.com. Do not include a scheme or path.

What it checksExpiry, date validity, hostname match, certificate trust, SPF, and DMARC.

Near-expiry noticeA warning appears when a certificate expires in 30 days or less.

PrivacyScans run on request. Your completed result is saved to an opaque brief so you can return to it for checkout.