SSL/TLS inspector
SSL certificate checker
Check the certificate a site actually serves: who issued it, when it expires, which names it covers, whether the chain is complete, and which TLS versions the server accepts. Run it after a renewal or when browsers show a warning.
We check from the outside, the way visitors see your site, and keep a simple log of sites checked. Privacy policy.
How it works
What this checks
- Certificate Issuer, valid from and until, days left, and whether the names on it cover the domain you typed.
- Chain of trust Whether browsers trust it, and whether the server sends the intermediate certificates they need.
- Protocols Which TLS versions the server accepts. TLS 1.2 and 1.3 are expected; 1.0 and 1.1 should be switched off.
- HSTS and CAA Whether the site tells browsers to always use HTTPS, and which certificate authorities DNS allows to issue for the domain.
- Other ports Add :8443 or another port to the domain to check a certificate that is not served on 443.