🔒

SSL Certificate Checker

LOCAL · Browser-Only

Check SSL certificate details, expiry, and covered domains

Domain

Enter a hostname (e.g. example.com). Runs a live TLS scan; the first scan of a new host can take 20-60 seconds.

How it works: This tool runs a live TLS handshake against the domain and reports the certificate actually served: issuer, validity window, covered names, the verified chain, supported TLS protocols, key strength, and forward secrecy, plus an overall security grade. Expiry is calculated from the certificate's Not After date. If a live scan is unavailable, it falls back to the most recently issued certificate from public Certificate Transparency logs (issuance only, not a live handshake).

·Share recipe

Was this tool helpful?

What is SSL Certificate Checker?

Free online SSL certificate checker to inspect SSL/TLS certificates for any website.

Check when an SSL certificate expires, see the days remaining until expiry, and confirm whether the certificate is valid right now. View the issuer, subject domain, validity dates, protocol version, and whether the certificate chain is complete. Get warnings for expiring, expired, self-signed, and misconfigured certificates. Useful for monitoring website security and avoiding certificate expiration outages. No signup required.

How to Use SSL Certificate Checker

1Enter a domain name (e.g., example.com)
2Click Check to inspect the SSL certificate
3View certificate details, issuer, and expiration
4Check for warnings about expiring or misconfigured certificates

Frequently Asked Questions

What information does the SSL check show?

The issuer (Let's Encrypt, DigiCert, etc.), subject (domain name), valid from/to dates, days until expiration, protocol version, and whether the certificate chain is complete.

How often should I check my SSL certificate?

Check monthly at minimum. Set up monitoring for certificates expiring within 30 days. Let's Encrypt certificates expire every 90 days and should auto-renew, but it's good to verify.

What does the certificate chain mean?

The certificate chain connects your site's certificate to a trusted root certificate authority (CA) through intermediate certificates. A broken chain means browsers won't trust the certificate.

How do I check how many days until my SSL expires?

Enter your domain and run the check. The result shows the valid-to date alongside a days-remaining count. If that number is low, renew before it hits zero to avoid browser warnings and downtime for visitors.

How do I tell if a certificate is self-signed?

Compare the issuer and subject fields. If they are the same and the issuer is not a recognized certificate authority, the certificate is self-signed. Browsers will not trust a self-signed certificate on a public site and will show a security warning.

Share this tool

Related Tools

↪️

Redirect Chain Checker

Free online redirect chain checker - trace HTTP redirect chains and hops

🔎

Dns record lookup

Free online DNS lookup - query DNS records (A, MX, TXT, CNAME, NS)

🛡️

URL Safety Checker

Free online URL safety checker - scan URLs for malware, phishing, and security threats

🔗

Dead link checker

Free online broken link checker - find broken links on web pages

What is my ip

Free online IP address lookup - find your public IP address and basic network information

Facebook share preview

Free online open graph preview - preview how your page looks when shared on social media platforms

⚡

Website performance test

Free online website speed test - analyze page load performance metrics

📋

Check http headers

Free online HTTP headers checker - view HTTP response headers for any URL

Keep reading: Python Cheat Sheet and http headers reference. Doing this in code instead? See the hashing and security endpoints.