cfssl scan -- scan a host for issues
Usage of scan:
        cfssl scan [-family regexp] [-scanner regexp] [-timeout duration] [-ip IPAddr] [-num-workers num] [-max-hosts num] [-csv hosts.csv] HOST+
        cfssl scan -list

Arguments:
        HOST:    Host(s) to scan (including port)
Flags:
  -list=false: list possible scanners
  -family="": scanner family regular expression
  -scanner="": scanner regular expression
  -timeout=5m0s: duration (ns, us, ms, s, m, h) to scan each host before timing out
  -ip="": remote server ip
  -ca-bundle="": path to root certificate store
  -num-workers=10: number of workers to use for scan
  -csv="": file containing CSV of hosts
  -max-hosts=100: maximum number of hosts to scan