Each scan computes a 0–100 score: days left (40 pts, full marks at ≥30 days), protocol (20 pts, TLS 1.3 full / TLS 1.2 scores 18), key strength (20 pts, RSA ≥2048 / ECDSA / Ed25519 full) and issuer trust (20 pts, well-known CA full, unknown 10, self-signed 5).
Score refreshes with every scan
Low scores highlighted
Days left, serial number and issuer shown together
90-day Snapshots
Every scan appends a snapshot (time / days left / score / serial) kept on a rolling 90-day window — review any moment to pinpoint when a cert was replaced or downgraded.
History is Pro-only; the free inspector reminds on expiry and keeps no history.