Notes

Goals

Item key, parameters and output format should match reference implementation of native Zabbix item (see ZBXNEXT-5931/ZBXNEXT-6708 and documentation). This will allow easier migration between Zabbix agent2 and this module (in both directions) and template reuse.

Parameters

1. hostname
2. port
3. domain

Output format

{
  "x509": {
    "version": <number>,
    "serial_number": "<string>",
    "signature_algorithm": "<string>",
    "issuer": "<string>",
    "not_before": {
      "value": "<string>",
      "timestamp": <number>
    },
    "not_after": {
      "value": "<string>",
      "timestamp": <number>
    },
    "subject": "<string>",
    "public_key_algorithm": "<string>",
    "alternative_names": [
      "<string>",
      ...
    ]
  },
  "result": {
    "value": "invalid|valid|valid-but-self-signed",
    "message": "<string>"
  },
  "sha1_fingerprint": "<string>",
  "sha256_fingerprint": "<string>"
}

Testing

A collection of websites with misconfigured certificates: https://badssl.com