Free tool
SSL certificate checker
Check that a website's certificate is valid, trusted, covers the right names and is not about to expire.
How it works
Enter a domain
Type the website address, for example example.com or www.example.com.
We connect over TLS
Our server opens a secure connection to the website on port 443, exactly like a browser, and reads the certificate it presents.
See the verdict
Issuer, dates, days left, the names it covers, whether the chain is trusted and which TLS version was used.
SSL checker: questions and answers
The usual causes are an expired certificate, a certificate for a different name (for example only www), a missing intermediate certificate, or pages that load images and scripts over http://. This checker shows the first three.
Browsers trust a certificate through a chain of intermediate certificates up to a trusted root. If the server does not send the intermediate certificate, or the certificate is self-signed, browsers warn visitors.
Free 90-day certificates renew automatically about 30 days before expiry. Paid certificates should be renewed a few weeks ahead. We flag anything with 14 days or less.
TLS 1.2 and TLS 1.3. Browsers no longer accept TLS 1.0 or 1.1.
Want this handled for you?
Register your domain with GlobalHostia and get DNS, SSL and email set up by our team, with support around the clock.