free tool
SSL certificate checker
Enter an address and we read its TLS certificate once, right now: whether a browser would trust it, who issued it, and how many days it has left.
No account and no card. For every check at once, run the free website health check.
01 / what it reads
Three things about one certificate
We connect to the address you enter and read the certificate it presents. A monitored site gets the same read hourly.
Whether it is trusted
The certificate is verified the way a browser verifies it: issued by an authority browsers trust, for this hostname, with the chain complete.
When it expires
The expiry date and the days left. Fewer than 30 days is marked as something to look at, even while it still works.
Who issued it
The authority that signed it (Let's Encrypt, a commercial CA, or your host's own), which is where to look when a renewal fails.
02 / limits
What it does not check
It answers one question: will this certificate keep working? It does not audit the server.
- The TLS protocol versions and cipher suites the server offers.
- Other hostnames on the same certificate, or other servers behind the same address.
- Mixed content: pages loaded over HTTPS that pull in scripts or images over plain HTTP.
- Anything on a later date: the result is true of the moment you pressed the button.
questions
Questions
How do I check when a website's SSL certificate expires?
Enter the site's address in the form on this page. The result gives the date the certificate expires and how many days that leaves.
A certificate with fewer than 30 days left is marked as something to look at even though it still works, because that is the window in which a failed renewal nobody noticed still has time to be fixed.
What does it mean when a certificate is not trusted?
It means the certificate did not verify the way a browser verifies it, so visitors see a warning instead of the site.
The usual causes are a certificate issued for a different hostname, a self-signed certificate, or a server that does not send the intermediate certificate linking its own to a trusted authority.
Does this checker grade TLS versions and cipher suites?
No. It reads the certificate: whether it is trusted, who issued it and when it expires. It does not rate the protocol versions or ciphers a server offers.
Can I be reminded before a certificate runs out?
Yes, by monitoring the site. The certificate is read hourly on every plan, and a reminder goes out 14, 7, 3 and 1 days before it expires. A certificate that stops being trusted makes the site count as down, and that is announced like any outage.
Other free checks
-
Domain expiry checker
Looks a domain up with its registry over RDAP or WHOIS and reports the registrar and the date the registration runs out.
-
Broken link checker
Follows the links on one page and lists the ones that no longer answer, separately from those whose server turned the check away.
-
Meta tag checker
Reads one page's title, meta description, social image and mobile viewport, and says which are missing.
-
Website health check
Every check at once: uptime, the certificate, the domain, links and meta tags.
Hear about it before it expires
Monitoring reads the certificate hourly and reminds you 14, 7, 3 and 1 days before it runs out. Free covers 3 sites, takes no card and keeps running for as long as somebody signs in.