SSL certificate checker
Also check this domain: Who hosts this website?DNS lookupIs it down? + speedWHOIS lookup
Check any website's SSL/TLS certificate: whether browsers trust it, who issued it, when it expires, which domain names it covers and the TLS version and cipher in use. Handy after moving hosts, and before a certificate quietly expires.
What we check
- Validity: we connect as a browser would, verifying the certificate chain and that it matches the domain name.
- Expiry: days left until the certificate expires. Free certificates (such as Let's Encrypt) last 90 days and renew automatically, if one is close to expiry, auto-renewal may be failing.
- Coverage: the names in the certificate (subject alternative names), including
www. - Protocol: the TLS version negotiated: TLS 1.2 or 1.3 is what you want.
Common problems
- Name mismatch: the certificate doesn't include the exact domain (often the
wwwor non-wwwversion). - Expired certificate: usually auto-renewal failing after a DNS or host change.
- Incomplete chain: the server isn't sending the intermediate certificate.
Every host we track includes free SSL, except unmanaged cloud servers where you install it yourself.
Frequently asked questions
Is a free SSL certificate as secure as a paid one?
For encryption, yes. Paid certificates add organization validation or warranties, which most small sites don't need.
Why does my site show "not secure"?
The certificate may be missing, expired or not cover the exact domain, or the page loads some resources over plain HTTP (mixed content).
How often do SSL certificates need renewing?
Free certificates usually last 90 days and renew automatically; paid ones last up to about a year.