SSL checker

What does the SSL checker check?

• The certificate the site sends: who it was issued to and who issued it.
• The dates it is valid from and until, and how many days are left.
• Every name the certificate covers. A certificate for *.example.com covers www.example.com but not example.com itself, so most certificates list both.
• The chain: whether the certificates the site sends lead to an authority our server trusts, and whether the name you entered is on the certificate.
• The TLS version of the connection. TLS 1.2 and TLS 1.3 are the current versions.

When we checked example.com with this tool, its certificate covered both example.com and *.example.com, and the server sent a chain of four certificates.

How do I read the result?

Green means browsers will trust the certificate. Yellow means it is valid but expires within 14 days, so check that automatic renewal still works.

Red means browsers will show a warning, and the line says why: the certificate has expired, is not valid yet, does not cover the name you entered, or the chain is not trusted. An untrusted chain usually means a self-signed certificate, or a server that sends its own certificate without the intermediate certificate that links it to a trusted authority.

The chain table lists each certificate the server sent, in order. The first is the site’s own certificate. The rest are intermediates.

Questions and answers

Why does my site work in my browser but fail here?

Some browsers fill in a missing intermediate certificate from their own cache, so the site works for you but fails for other visitors and for apps. This check uses only what the server sends. Install the full chain (often a file called fullchain) and check again.

Can I check a port other than 443?

No. The checker only connects to port 443, the standard port for https.

Does Webstribe hosting include SSL?

Yes. Every domain on a Webstribe plan gets a free certificate that renews by itself. Our guide Get https working shows how to switch WordPress to it.

Do you keep the domains I check?

No. We do not save the names you enter.

More free tools

• DNS checker

  Ask Cloudflare, Google and Quad9 for a record at the same time and see whether they agree.

• WHOIS lookup

  Find a domain's registrar, creation and expiry dates, status and name servers. Works for .pk domains too.

• IP lookup

  See your own IP address, or find which network and country an IP address belongs to.

• Website up or down checker

  Load a page once and see the status code, how long it took, the time to first byte and every redirect.

• Password generator

  Make a random password in your browser. It is never sent anywhere, not even to us.