Free SSL checker
Type a domain. We connect the way a browser does and read the certificate: who issued it, when it expires, which names it covers, and whether browsers will trust it.
What you get
- Expiry date and days left, with the severity we would alert at.
- Issuer, so you know who renews it.
- Every name the certificate covers (www and bare domain).
- Chain completeness, self-signed and name-mismatch problems.
- The TLS protocol version negotiated.
Common questions
My certificate expires in 30 days. Is that a problem?
Not yet. Most are renewed automatically in the last 30 days. If it drops under 20 days on an automatic issuer like Let's Encrypt, renewal has probably failed and you should check.
The checker says the chain is incomplete but my browser shows a padlock.
Desktop browsers often fetch the missing link themselves; phones and some mail clients do not. Serve the full chain to be safe.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.