Skip to main content
SSL Certificate Lookup app icon

SSL Certificate Lookup

Provides sslcert_lookup, an external lookup that when given an IP or domain (works with SNI) and optionally port from an existing search, can give enrich the search by finding values from an SSL certificate like CN , SAN (Subject Alternative Names), and expiration. This can be handy for several use cases like looking for certificate expiration or discovering what site may be at an IP address.Built by Nathan Worsham
splunk product badge
Default Version 1.1.5

August 30, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0

Rating
5
(3)

Log in to rate this app

Support
Developer Supported

Provides sslcert_lookup, an external lookup that when given an IP or domain (works with SNI) and optionally port from an existing search, can give enrich the search by finding values from an SSL certificate like CN , SAN (Subject Alternative Names), and expiration. This can be handy for several use cases like looking for certificate expiration or discovering what site may be at an IP address.