SSL Checker
Certificate issuer, expiry and HTTPS status.
- Free
- No sign-up
- Instant results
Check an SSL certificate in seconds
An SSL (TLS) certificate lets browsers open your site over HTTPS, shows the padlock and protects logins, forms and payments from being read or changed on the way. When a certificate expires or does not cover the name a visitor typed, browsers show a full-page warning and most people leave. This checker shows which certificate covers your domain, who issued it, when it expires and whether your server answers over HTTPS right now.
What the checker reports
- Verdict: whether HTTPS works and how many days the newest certificate has left, with a green, amber or red badge.
- Issuer: the certificate authority, such as Let's Encrypt, Google Trust Services, Sectigo or DigiCert.
- Validity: the valid-from and valid-to dates in UTC.
- Covered names: every host name (Subject Alternative Name) the certificate is valid for, including wildcards.
- HTTP to HTTPS: whether plain HTTP visitors are redirected to the secure version.
- Recent certificates: other unexpired certificates for the name, so you can spot a renewal or a forgotten server.
How Certificate Transparency helps
Since 2018 browsers only trust certificates that have been written to public Certificate Transparency logs. That makes the logs a reliable record of every certificate for your domain. Site owners also use them to catch certificates they did not request, which can be an early sign of a hijacked DNS account or a misused hosting panel.
Fixing common problems
If the days left are low, check that your hosting panel or certbot timer is still renewing. If HTTPS fails while a valid certificate exists, the server may not have the new certificate installed or port 443 may be closed. If HTTP does not redirect, add a permanent 301 redirect to HTTPS and consider HSTS once everything works.
Frequently asked questions
Where does the certificate data come from?
Every certificate a public authority issues must be published in Certificate Transparency logs. The checker reads those logs (through the Cert Spotter service) and also makes a live HTTPS request to your domain to confirm the site answers securely.
Why does it show several valid certificates?
Sites often have more than one certificate at a time: a renewed one waiting to be installed, separate ones for a CDN and the origin server, or both RSA and ECDSA versions. The newest valid certificate is shown first; your server may serve any of them.
How many days before expiry should I renew?
Let's Encrypt and most automated setups renew around 30 days before expiry. If the checker shows fewer than 14 days left on every certificate, the automatic renewal has probably failed and needs attention.
Does a valid certificate mean the site is safe?
No. A certificate only proves the connection is encrypted and that the certificate authority checked control of the domain. It says nothing about who runs the site or whether its content is honest.
Why are new certificates not shown immediately?
Log results are cached for up to an hour to stay within the free log service limits. A certificate issued minutes ago may appear on the next check; the live HTTPS test always runs fresh.
More website tools
All website toolsDNS Record Checker
A, AAAA, MX, TXT, NS, CNAME and more.
Runs in your browser Website toolsWHOIS Lookup
Registrar, dates and nameservers of a domain.
Runs in your browser Website toolsDomain Age Checker
How old is a domain?
Runs in your browser Website toolsHTTP Status Checker
Status codes and the full redirect chain.
Free online check Website toolsIs It Down?
Down for everyone or just you?
Free online check Website toolsIP Checker
Your IP, or the IP of any website.
Runs in your browser