SSL checker: is your certificate about to expire?
Enter your website's address. We connect the way a browser does and tell you when the certificate expires, who issued it, whether it covers the address with and without www, and whether the connection is set up properly.
- No sign-up, full result
- Expiry, issuer, chain, www
- A–F grade with explanations
We only do what any browser does: one HTTPS connection and one visit to the homepage over http://. We don't try any passwords and we don't touch anything on your server.
What an SSL certificate is
The SSL certificate (properly called TLS) is what makes the address start with https:// and show a padlock. It encrypts whatever the visitor sends, from a contact form to card details, and proves they are really talking to your website.
Every certificate has an expiry date. Free Let's Encrypt certificates last 90 days and normally renew themselves. When renewal stops, nobody notices until the day visitors see a red warning instead of your website.
How it works
- 1
Enter the address
For example www.example.com, with or without https://.
- 2
We connect like a browser
We read the certificate your server sends, its chain and the connection's protocol.
- 3
We check what visitors run into
Expiry, name, the address with and without www, old protocols, the http redirect and HSTS.
- 4
You get a grade and an explanation
A grade from A to F and what each finding means, so you know what to ask your hosting provider, or us.
Why check your SSL
An expired page sends customers away
The browser's warning fills the whole screen. Most people don't click "Proceed" and go to the next business on the list.
Google and browsers expect it
HTTPS is a ranking signal for Google, and Chrome marks every page without it as "Not secure", especially when it has a form.
Problems don't show from the inside
A certificate without its intermediate, or without www, can work on your own computer and fail on a customer's phone.
Nine checks on the HTTPS connection
The same checks every visitor's browser makes, plus the ones it doesn't show you.
The certificate
Whether browsers trust it.
- Issuer and full chain
- Name, with and without www
- Key and signature
Expiry
Before visitors see it.
- Expiry date
- Warning under 21 days
- Signs that automatic renewal stopped
The connection
How visitors reach https.
- TLS 1.3 or 1.2, not 1.0 and 1.1
- Redirect from http to https
- HSTS
About your website's SSL
How do I see when my SSL certificate expires?
Enter the address in the tool: it shows the expiry date and how many days are left. In the browser, click the icon to the left of the address and open the certificate details. If fewer than 21 days are left on a Let's Encrypt certificate, automatic renewal probably isn't working.
Why does the browser say the connection is not private?
The most common reasons are that the certificate has expired, that it doesn't cover the form of the address you typed (with www, for example), that the intermediate certificate is missing, or that it is self-signed. The check shows which one applies to your website.
Is free SSL as secure as paid SSL?
Yes, for encryption. A free Let's Encrypt certificate protects the connection exactly like a paid one, and every browser trusts it. Paid certificates mostly add a longer term, a warranty or company validation, which browsers no longer display in any special way.
Why set up automatic renewal?
Because certificate lifetimes are shrinking. The rules every certificate authority follows set a maximum of 200 days from March 2026, 100 days from 2027 and 47 days from 2029. With renewals that frequent, a single forgotten manual renewal is enough to take the website offline.
What is an intermediate certificate and why is it missing?
Certificate authorities don't sign your certificate directly with their root, but through an intermediate. The server has to send that one too. When it is missing, usually because only the domain's own file was installed, desktop Chrome may find it on its own, but many phones and apps show an error.
Do you store anything from the check?
We keep only the domain and the result of the check, such as the grade and the expiry date. We don't store anything from your website's content.
Never want to think about SSL again?
We install a proper certificate with automatic renewal and monitoring, along with the http redirect and HSTS, so your customers never see a warning.