SSL Certificate Checker
Check any website's SSL/TLS certificate: whether it's trusted, which names it covers, who issued it and when it expires.
How to check an SSL certificate
- Enter the domain, e.g.
example.comorwww.example.com. - Keep port 443 for websites, or pick a mail port.
- Press Check SSL certificate.
- Check both
example.comandwww.example.com: each name needs to be on the certificate. - To see when the domain itself expires, use the Domain Expiry Checker.
SSL Checker: frequently asked questions
How do I check a website's SSL certificate?
Enter the domain and press Check SSL certificate. You will see whether it is trusted, the names it covers, who issued it, when it expires and the full chain.
Why does my certificate show a name mismatch?
The certificate doesn't list the exact name you checked. A certificate for example.com doesn't cover www.example.com unless both are included, so add every name you use when issuing it.
What does "incomplete chain" mean?
The server isn't sending the intermediate certificate that links your certificate to a trusted root. Some browsers cope, but others and many apps show errors. Install the full chain (often called fullchain.pem).
How often do SSL certificates expire?
Publicly trusted certificates last at most 398 days, and free Let's Encrypt certificates last 90 days, so automatic renewal is essential.