SSL checker
Enter a website. We check its certificate from 15 locations on 6 continents and show who issued it, which names it covers, whether the chain is complete and how many days are left.
Never miss a renewal
Get alerted 14 days before it expires, or as early as you choose, up to 90 days. 650,000 free credits every month.
What is an SSL certificate?
An SSL (properly TLS) certificate proves that a site is who it says it is and lets the browser encrypt the connection. When it expires, or doesn’t cover the name visitors type, browsers show a full-page warning and most people leave.
Why from 15 locations?
Sites behind a CDN or several servers can hand out different certificates in different places. If one server was missed during renewal, visitors in that region see an expired certificate while you see a valid one. We show the certificate each location got.
The full certificate
Our server reads the certificate and every intermediate the site sends, and checks them as a strict client would.
Every location
Each probe does its own TLS handshake and reports whether the certificate validates and how many days it has left.
Same everywhere?
Different expiry dates or errors at some locations mean different servers hand out different certificates.
Not only HTTPS
Any port that speaks TLS directly: 443, 465 for mail, 993 for IMAP, 8443 and more.
What does «incomplete chain» mean?
The server sends its own certificate but not the intermediate one that links it to a trusted root. Desktop browsers often fix it themselves; phones, apps and APIs fail. Install the full chain your provider gave you.
My certificate renews automatically. Do I still need to check?
Automatic renewal fails more often than people think: a changed DNS record, a firewall, a full disk. The certificate expires on schedule either way.
What’s the difference between SSL and TLS?
TLS is the modern name. Everyone still says SSL; it’s the same certificate.
Why does the certificate differ between locations?
Different servers or CDN nodes answer in different regions. Make sure all of them got the renewed certificate.
Do you store what I check?
The address, the results and your IP are kept for 7 days, so the result link can be shared. Nothing else.