SSL Expiration Scanner

Summary

Utility script for Windows environments. PowerShell-first, RC:U approved.

Requirements

• OS/Role: Windows with required features for the script’s commands

Parameters

Name	Type	Mandatory	Default	Notes
ComputerName	String[]	False
Port	Int32[]	False	443
InputFile	String	False
WarningDays	Int32	False	30
TimeoutSec	Int32	False	7
Throttle	Int32	False	64
OutputCsv	String	False
OutputJson	String	False
InlineNames	String[]	False
DefaultPorts	Int32[]	False
Path	String	False
Host	String	False
Port	Int32	False
SniHost	String	False
TimeoutSec	Int32	False
WarningDays	Int32	False
s	Object	False
cert	Object	False
chain	Object	False
errors	Object	False

Examples

.\Get-TlsExpiry.ps1 -ComputerName contoso.com,api.contoso.com -WarningDays 15

'web01','10.1.2.3:8443' | .\Get-TlsExpiry.ps1 -Port 443,8443 -OutputCsv .\tls_expiry.csv

.\Get-TlsExpiry.ps1 -InputFile .\targets.csv -Throttle 100 -TimeoutSec 5

Output

• Format: CSV

Sample:

<small sample omitted; depends on runtime>

How it works

Aggregates and summarizes data; Writes results to CSV.

Risks & Notes

• Performance counters may vary by OS build or role.
• High-frequency scheduling can skew short-interval readings.
• Run elevated if counters return zeros or access is denied.

Changelog

• 2025-08-20 - v1.0.0 - Initial page generation