SSL Certificate Inspector
Reads the certificate served on port 443: issuer, expiry and alternative names.
Reading the result
Renew well before expiry. Under 14 days is flagged.
Limitations
Protocol and cipher strength are not graded, and the chain is not validated.