SSL certificate checker
Type your domain and in seconds see whether the certificate is valid, who issued it and when it expires. It is free, no signup, and it only looks at what is visible from the outside.
What the check tells you
It is a real handshake to port 443 of your domain: the same thing your browser does when you visit, with the result in plain sight.
Certificate status
Protected, expiring soon (15 days or less), expired, invalid or no SSL. The status comes from the certificate your domain serves today.
Issuer
Who signed the certificate: Let's Encrypt, Google Trust, DigiCert, SSL Corporation and other authorities browsers trust.
Expiry date and days left
The exact date it expires and how many days are left. If it already expired, it says so.
Type: DV or OV
DV (domain validated) or OV (organization validated), based on what the certificate declares. EV is not reported here: it needs a field this check does not read.
Why it failed
If the result is not OK, it tells you why. There are four possible reasons:
- The certificate chain is incomplete: the intermediate certificate is missing.
- The certificate has expired.
- Self-signed certificate: no browser recognizes it.
- The certificate belongs to a different domain.
The next step
If the result is not OK, the button takes you to the full free analysis: headers, DNS, files and more, at no cost.
What this check does not do
A valid certificate is one part of the problem, not all of it. Here is what the check does not do, so nobody gets the wrong idea:
- It does not install or renew the certificate. Your host or server admin does that. This only reads the certificate that is already published.
- It is not a pentest. It does not look for vulnerabilities or try exploits: it looks at the public certificate and nothing else.
- It does not get into your server. It does not read files, databases, panels or configuration: the connection stops at the TLS handshake.
- It does not guarantee security. A site with SSL can be just as broken inside. The padlock means the connection is encrypted, not that the site can be trusted.
When the certificate cannot be seen
- No HTTPS on port 443: there is no certificate to read and the result is "no SSL".
- The domain does not resolve: there is no connection, so the check does not blame the certificate.
- The certificate belongs to another domain: the result is "invalid".
Frequently asked questions
What people ask most before trying it.
Is it free?
Yes. Nothing to pay and no signup. There is a cap of 30 checks per hour per connection so the service stays free.
Does this install SSL on my site?
No. It only checks the public certificate already installed. If something is wrong, installation or renewal is done by your host or admin.
How often does a certificate expire?
Free Let's Encrypt certificates last 90 days and renew themselves if the server is set up right. Commercial ones usually last one year.
What are DV, OV and EV?
They are validation levels. DV only proves you control the domain; OV adds organization data; EV is the strictest and requires extra verification. This check reports DV or OV: it does not tell EV apart.
Can expiry be monitored automatically?
Yes, with paid plans (US$19, US$39 and US$149 per month): they monitor your verified domains and email you when the certificate has 3 days or less left. The check on this page is manual: you run it when you want.
What if my domain does not resolve?
If DNS returns no IP, there is no connection: the check answers that it could not query the domain and says nothing about the certificate. Check your DNS and try again.
Do not let expiry catch you off guard
US$19/month
The Personal plan costs US$19/month and monitors your site: it emails you when the certificate has 3 days or less left.
No lock-in. You can start with the full free analysis and decide later.