HTTPS Interception Detector
Check which TLS certificate your computer receives when connecting directly to Ingenix.
Choose your script
Choose PowerShell for Windows or Bash for Linux/macOS. Review the code before running it, then use the copy button to copy it into a local script file.
PowerShell script
Bash script
Scripts are shown as plain text and are not executed by this page. Copy the code into a local .ps1 or .sh file before running it.
How to run it
Windows: Select the PowerShell tab and click Copy script. Open PowerShell, paste the code into the terminal, and press Enter.
Linux/macOS: Select the Bash tab and click Copy script. Open a terminal, paste the code, and press Enter. OpenSSL is required.
Review the script before running it. It makes a direct connection to Ingenix and does not change your system settings.
Understand the result
- Expected certificate presented: no interception detected on this direct connection.
- Certificate mismatch: possible TLS interception, but certificate renewal or another legitimate change can also cause a mismatch.
- Inconclusive: connection or certificate inspection failed.
Scope: these scripts make a direct connection and do not use explicit system proxy settings, so they may bypass an explicit proxy. The result separates certificate validation from the fingerprint comparison. A mismatch can indicate interception or a legitimate certificate change; a match only means the expected certificate was presented on this connection. Update the pinned fingerprint when Ingenix renews or replaces its certificate.
Results include a timestamp, certificate subject and issuer, validity dates, fingerprint, validation status and an exit code: 0 expected certificate, 1 inconclusive, 2 valid certificate but fingerprint mismatch.