SSL certificate checker: is the certificate valid, and for how long?
Enter a domain to see its certificate's expiry date, issuer and chain, whether it matches the hostname, and which TLS version the server uses.
Check a certificate
Live checkTurn any long URL into a short, trackable link.
Once the destination checks out, shorten it with click analytics by source, location and device, all in one dashboard.
What a certificate proves.
That the server is the one the browser asked for, and that the connection is encrypted.
When a browser opens an HTTPS page, the server presents a certificate that names the domains it is valid for, the authority that issued it, and the dates between which it can be used. The browser checks the name, the dates and the chain of signatures up to an authority it already trusts.
If any check fails, visitors see a full-page warning. The most common cause is simple: the certificate expired because renewal wasn't automated or silently failed.
This checker connects the way a browser does and reports the result of those checks, instead of just failing, so you can see why a certificate is rejected.
Common questions
How long are certificates valid? +
Publicly trusted certificates are currently limited to about 13 months, and Let's Encrypt issues 90-day certificates that are meant to be renewed automatically.
What does an incomplete chain mean? +
The server didn't send the intermediate certificate, so some browsers and apps can't link the certificate to a trusted authority. Install the full chain on the server.
What is the difference between SSL and TLS? +
SSL is the old name. Everything in use today is TLS, and the name SSL stuck. TLS 1.2 and 1.3 are the versions to use.
Why does it work in my browser but fail here? +
Browsers can fill in a missing intermediate certificate from their own cache. This tool doesn't, so it shows the problem a fresh client would hit.