← Back to test console
Fleet Certificate Chain Explorer
41 distinct path(s) across the fleet · 1 with a missing intermediate somewhere · 0 with chain-length drift · 2 resolved via another file somewhere · click one to see the per-node breakdown
Data comes from Prometheus's last scrape of every scraped node's cert-analyzer metrics -- a newly-discovered or newly-broken chain can take up to one scrape interval to show up here. Cross-file issuer resolution only ever searches other bundles on the *same* node -- a fix that only exists on a different host is never counted as resolving a gap here.
/dev/shm/certsight-test-server/chain-missing-1-808f684c5ac2.crt
1 node(s) · 1 MISSING INTERMEDIATE
/dev/shm/certsight-test-server/chain-multifile-int3-1c3f64aea68b.crt
1 node(s) · 1 resolved elsewhere
/dev/shm/certsight-test-server/chain-multifile-leaf-1c3f64aea68b.crt
1 node(s) · 1 resolved elsewhere
tls-connect-probe://140.248.150.132:443
2 node(s)
tls-connect-probe://146.75.38.132:443
2 node(s)
tls-connect-probe://34.144.209.88:443
2 node(s)
tls-connect-probe://65.182.224.39:443
2 node(s)
/dev/shm/certsight-test-server/chain-multifile-int2-1c3f64aea68b.crt
1 node(s)
/dev/shm/certsight-test-server/chain-multifile-root-1c3f64aea68b.crt
1 node(s)
/etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
1 node(s)
/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
1 node(s)
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 node(s)
/host/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 node(s)
/host/var/certsight-test-server/nonfips-cipher-probe-036b08bd8dfc.crt
1 node(s)
tls-bind-probe://10.42.0.14:51105
1 node(s)
tls-connect-probe://109.74.17.10:443
1 node(s)
tls-connect-probe://127.0.0.1:6443
1 node(s)
tls-connect-probe://140.211.169.196:443
1 node(s)
tls-connect-probe://140.248.150.217:443
1 node(s)
tls-connect-probe://140.82.114.3:443
1 node(s)
tls-connect-probe://146.75.30.132:443
1 node(s)
tls-connect-probe://146.75.30.217:443
1 node(s)
tls-connect-probe://146.75.38.217:443
1 node(s)
tls-connect-probe://152.2.23.103:443
1 node(s)
tls-connect-probe://162.245.106.238:443
1 node(s)
tls-connect-probe://172.65.90.53:443
1 node(s)
tls-connect-probe://185.199.110.133:443
1 node(s)
tls-connect-probe://206.198.182.70:443
1 node(s)
tls-connect-probe://206.82.17.213:443
1 node(s)
tls-connect-probe://34.120.177.193:443
1 node(s)
tls-connect-probe://34.128.144.233:443
1 node(s)
tls-connect-probe://34.36.6.112:443
1 node(s)
tls-connect-probe://34.49.170.206:443
1 node(s)
tls-connect-probe://34.49.195.49:443
1 node(s)
tls-connect-probe://38.145.32.20:443
1 node(s)
tls-connect-probe://38.145.32.21:443
1 node(s)
tls-connect-probe://38.145.32.47:443
1 node(s)
tls-connect-probe://67.219.144.68:443
1 node(s)
tls-connect-probe://68.235.48.115:443
1 node(s)
uprobe://java_cert_agent_write/258566/95258643500005969091211122771861781956051733284
1 node(s)
uprobe://java_cert_agent_write/260244/145941654044068382147314427256110856816692123678
1 node(s)
/dev/shm/certsight-test-server/chain-missing-1-808f684c5ac2.crt
1 node(s) · 1 missing intermediate
Node Chain length Status ip-172-31-36-9.ec2.internal 4 MISSING INTERMEDIATE
leaf
certsight-test-chain-leaf-808f684c5ac2.local
CN=certsight-test-chain-int3-808f684c5ac2.local
→
intermediate ca
certsight-test-chain-int2-808f684c5ac2.local
CN=certsight-test-chain-int1-808f684c5ac2.local
→
MISSING
→
intermediate ca
certsight-test-chain-int3-808f684c5ac2.local
CN=certsight-test-chain-int2-808f684c5ac2.local
→
root
certsight-test-chain-root-808f684c5ac2.local
CN=certsight-test-chain-root-808f684c5ac2.local
/dev/shm/certsight-test-server/chain-multifile-int3-1c3f64aea68b.crt
1 node(s) · 1 resolved elsewhere
Node Chain length Status ip-172-31-36-9.ec2.internal 1 resolved via another file
intermediate ca
certsight-test-chain-int3-1c3f64aea68b.local
CN=certsight-test-chain-int2-1c3f64aea68b.local
→
FOUND ELSEWHERE
CN=certsight-test-chain-int2-1c3f64aea68b.local
/dev/shm/certsight-test-server/chain-multifile-int2-1c3f64aea68b.crt
/dev/shm/certsight-test-server/chain-multifile-leaf-1c3f64aea68b.crt
1 node(s) · 1 resolved elsewhere
Node Chain length Status ip-172-31-36-9.ec2.internal 1 resolved via another file
leaf
certsight-test-chain-leaf-1c3f64aea68b.local
CN=certsight-test-chain-int3-1c3f64aea68b.local
→
FOUND ELSEWHERE
CN=certsight-test-chain-int3-1c3f64aea68b.local
/dev/shm/certsight-test-server/chain-multifile-int3-1c3f64aea68b.crt
tls-connect-probe://140.248.150.132:443
2 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://146.75.38.132:443
2 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://34.144.209.88:443
2 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://65.182.224.39:443
2 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK ip-172-31-36-9.ec2.internal 1 OK
/dev/shm/certsight-test-server/chain-multifile-int2-1c3f64aea68b.crt
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
/dev/shm/certsight-test-server/chain-multifile-root-1c3f64aea68b.crt
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
/etc/pki/ca-trust/extracted/pem/email-ca-bundle.pem
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 103 OK
/etc/pki/ca-trust/extracted/pem/objsign-ca-bundle.pem
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 298 OK
/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 146 OK
/host/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 146 OK
/host/var/certsight-test-server/nonfips-cipher-probe-036b08bd8dfc.crt
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-bind-probe://10.42.0.14:51105
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-connect-probe://109.74.17.10:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://127.0.0.1:6443
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-connect-probe://140.211.169.196:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://140.248.150.217:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://140.82.114.3:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://146.75.30.132:443
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-connect-probe://146.75.30.217:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://146.75.38.217:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://152.2.23.103:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://162.245.106.238:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://172.65.90.53:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://185.199.110.133:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://206.198.182.70:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://206.82.17.213:443
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-connect-probe://34.120.177.193:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://34.128.144.233:443
1 node(s)
Node Chain length Status ip-172-31-35-90.ec2.internal 1 OK
tls-connect-probe://34.36.6.112:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://34.49.170.206:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://34.49.195.49:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://38.145.32.20:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://38.145.32.21:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://38.145.32.47:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://67.219.144.68:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
tls-connect-probe://68.235.48.115:443
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
uprobe://java_cert_agent_write/258566/95258643500005969091211122771861781956051733284
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK
uprobe://java_cert_agent_write/260244/145941654044068382147314427256110856816692123678
1 node(s)
Node Chain length Status ip-172-31-36-9.ec2.internal 1 OK