This is a simple, but (eventually) very fast scanner to identify certificates in use on your network.

Documentation is terrible at this point; the program is still being written and debugged, so configuration and output formats are in flux.

== Installation

Download the sources and run `cargo build --release`

Copy the binary `target/release/ascertain` somewhere on your path.

== Configuration

A simple example to get you started:

Place the following in sample_config.toml and run using `ascertain -c sample_config.toml`
[toml]
----
[targets]
hosts = ["10.24.74.0/24"]
ports = [443, 80, 8443, 636]
live_port = 22

[output]
format = "json"
output_file = "certs.jsonl"
issuer_file = "issuers.jsonl"
----

This probes port 22 to see if the target even exists; if so, it scans the other four ports.

There are many more config options; read src/config.rs and JSONConfig in src/report.rs for details.

