Check a site's SSL certificate: when it ends, who issued it, the names it covers, and whether visitors are sent to https.
Sample
example.com
Everything we checked looks good
Sample result | 5 good | 0 to improve | 0 to fix
Issuer
Let's Encrypt (R11)
Valid until
January 12, 2027
Connection
TLS 1.3 and 1.2
Good: Valid until January 12, 2027
75 days left. Issued October 14, 2026.
Good: http redirects to https
Visitors who type the plain address are sent to the secure site.
What This Checks
Whether browsers trust the certificate
The expiry date and days left, the issuer, and the names covered
The intermediate certificate, key strength, and signature
TLS 1.3, retired TLS versions, the http redirect, HSTS, and CAA
Every check reads only what the site and its public DNS show. Nothing is signed in to, submitted, or attacked.
Questions
How do I check when an SSL certificate expires?
Enter the domain above. We read the certificate straight from the site and show the date it ends and how many days are left.
Why does my site say "Not Secure" with a certificate installed?
Usually one of four things: the certificate expired, it does not cover the exact name visitors use (www or not), the intermediate certificate is missing, or the page loads some content over plain http.
Do free certificates work as well as paid ones?
For almost every site, yes. Let's Encrypt certificates are trusted by every browser and renew themselves. Paid certificates add a warranty and organization checks, not stronger encryption.
Why are the dates missing for some sites?
Sites behind Cloudflare get Cloudflare's own certificate, which it renews automatically, and Cloudflare does not let us connect to it directly to read the dates. We still check that browsers trust it.