Free tool

SSL certificate check

An SSL check shows the certificate a website presents: who issued it, when it expires, the names it covers, and whether its chain leads to an authority browsers trust. This one connects to the site once on port 443, reads the certificate during the secure handshake, and closes the connection without requesting a page.

FAQ

SSL check: questions

Browsers trust a certificate only when they can follow its issuers up to a root authority they know. A missing intermediate certificate or a self-signed certificate breaks that chain, and visitors see a warning.

Yes, for anyone who types the www address. Every name a site answers on must be in its certificate, or covered by a wildcard such as *.example.com.

Before it expires, and well before if renewal is manual. Certificate lifetimes are getting shorter: the CA/Browser Forum’s ballot SC-081 lowers the maximum step by step to 47 days by 2029, so automatic renewal matters more each year.

No. It connects only to public addresses on port 443, and refuses a name that points to a private, loopback, link-local or other reserved address.

HostLelo

Moving the site?

Web hosting from HostLelo, with real engineers on live chat. Plans renew at the price you sign up at. Any change needs 30 days’ notice.