Free SSL/TLS certificate checker
Check whether a website's SSL certificate is trusted, when it expires, who issued it and which TLS version the server uses. Useful before a launch, after moving hosts, or when customers report a "Not secure" warning.
What we check
- Trust: the certificate chains to a trusted authority and matches the domain name.
- Expiry: the exact end date, with a warning if fewer than 30 days remain.
- Protocol and cipher: the TLS version and cipher your server picks, and whether outdated TLS 1.0 or 1.1 is still accepted.
- Key and signature: short RSA keys and weak SHA-1 signatures are flagged.
Common fixes
Most hosting control panels (cPanel, Plesk, managed WordPress) offer free auto-renewing Let's Encrypt certificates. If you run your own server, Caddy renews automatically, and certbot does the same for Nginx and Apache. Turn off TLS 1.0/1.1 in your web server or load balancer settings.
Want this watched for you? ovuGuards monitoring can alert you before a certificate expires. Start free.
Frequently asked questions
How do I check when my SSL certificate expires?
Enter your domain above. We connect over HTTPS, read the certificate and show the exact expiry date and how many days are left.
What happens when an SSL certificate expires?
Browsers show a full-page security warning and most visitors leave. Payment pages and apps that call your API can stop working. Free certificates from Let's Encrypt renew automatically when set up correctly.
Why should TLS 1.0 and 1.1 be turned off?
They are old and officially deprecated (RFC 8996). Modern browsers no longer use them, and card-payment security rules (PCI DSS) don't allow them. Use TLS 1.2 and 1.3.
Does this checker install anything or store my data?
No. It makes a few normal HTTPS connections to read the public certificate. Results aren't saved.