SSL certificate checker.
Enter a domain to check its SSL certificate the way a browser does: whether it's trusted, how many days are left before it expires, which domain names it covers, who issued it, and whether visitors on http:// are sent to the secure version.
- Free, no sign-up
- We check public information only. How your data is handled
How to use the SSL Checker
- Enter a domain, such as example.com or www.example.com. Check both if your site uses both.
- We connect on port 443 and read the certificate, then test it with full browser-style verification.
- Check the expiry date and that the certificate covers the exact name you entered.
- Fix anything red, then check again.
Why SSL matters
An SSL (properly, TLS) certificate lets browsers connect to your site securely, shows the padlock, and proves the site really belongs to your domain. Without a valid one, Chrome, Safari and Firefox show a full-page warning that most visitors won't click past. Google also prefers secure pages in its results.
The problems this checker finds
- Expired certificate: the most common cause of sudden "Your connection is not private" warnings, usually because auto-renewal failed.
- Name mismatch: the certificate covers example.com but not www.example.com, or the other way round.
- Untrusted certificate: self-signed, or issued by an authority browsers don't recognise.
- Missing intermediate certificate: works on most desktops but fails on some phones.
- No redirect from http:// to https://, so some visitors stay on the insecure version.
Certificate lifetimes are getting shorter
Public certificates used to last a year or more. The industry has agreed to cut the maximum in stages, down to 47 days by 2029, so manual renewal is becoming impractical. Most hosts now use free, auto-renewing certificates from Let's Encrypt or similar. Make sure yours renews automatically, and keep an eye on it: the checker shows the days remaining.
Fixing SSL problems
On cPanel hosting, AutoSSL usually issues and renews certificates for you. If it fails, check that the domain's DNS points to the server and that nothing blocks the validation request. After installing a certificate, set up a 301 redirect from http:// to https:// and update internal links. If you'd rather not deal with it, our website care plans include certificate monitoring, and a website migration moves you to hosting that handles it properly.
About the SSL Checker.
How do I check when my SSL certificate expires?
Enter your domain above. The checker shows the expiry date and the number of days left.
Why does my site work on desktop but show a warning on some phones?
Usually a missing intermediate certificate. Install the full chain your certificate provider gives you, not just the site certificate.
Does www need its own certificate?
It needs to be covered. Most certificates list both example.com and www.example.com. If yours covers only one, visitors to the other get a warning.
Are free SSL certificates as good as paid ones?
For encryption and the padlock, yes. Let's Encrypt certificates are trusted by every major browser. Paid certificates add things like warranties and organisation validation.
Can this check certificates on other ports?
No, it checks the standard HTTPS port 443 only.
You might also need these.
Website Security Checker
Grade a site's security headers, HTTPS, SSL, cookies and mixed content, with fixes for each.
Use the toolDomain Health Checker
One report on a domain's DNS, website, SSL, email authentication and blacklist status.
Use the toolRedirect Checker
Trace every hop of a URL's redirects (301, 302, 307, 308), and check http, https and www all end in one place.
Use the toolWant this done for you?
Free tools show you what to fix. We fix it, measure it, and keep it working while you run the business.