Skip to content

How to Use SSL Certificate Checker

Check the SSL/TLS certificate of any website: issuer, expiry date, days left, trust, host name match, protocol, SANs and the full certificate chain.

About this tool

Check a website's SSL/TLS certificate: issuer, validity, expiry date, SANs and chain.

How to use SSL Certificate Checker

  1. Enter the domain name (and a port if it is not 443).
  2. Click Check SSL.
  3. Review the checks and the days left, then look at the names covered and the certificate chain.

Worked example

A certificate that “Expires in 9 days” fails the expiry check, telling you to renew now. “Not trusted” with a complete chain often means the server is not sending its intermediate certificate.

Why does my browser trust the site but the checker does not?

Browsers sometimes fetch missing intermediate certificates themselves. Other clients do not, so the server should send the full chain.

Which TLS version should a site use?

TLS 1.2 or TLS 1.3. TLS 1.0 and 1.1 are outdated and disabled in modern browsers.

Put this guide into practice

  • SSL Certificate Checker — Check a website's SSL/TLS certificate: issuer, validity, expiry date, SANs and chain.

Explore Security & Encoding Tools · More practical guides

Accessibility Menu

Personalize your experience. Open with Ctrl+U (Option+U on Mac). Preferences stay in this browser when storage is available.

Move / Hide Widget

Restore at any time with Ctrl+U (Option+U on Mac).

Accessibility statement and help