X.509 certificate linter enforcing Web PKI standards
X.509 Certificate Linter focused on Web PKI standards and requirements
zlint
$ zlint certificate.pem
$ zlint -format json certificate.pem
$ zlint example.com:443