Free SSL Certificate Checker
Enter any domain below to instantly inspect its SSL/TLS certificate. View the issuer, expiry date, protocol version, Subject Alternative Names and whether the certificate chain is trusted.
New to SSL/TLS? Read our SSL Certificate Monitoring guide for a full explanation.
What Is an SSL Certificate?
An SSL (Secure Sockets Layer) certificate, more accurately called a TLS (Transport Layer Security) certificate, is a digital credential that authenticates a website's identity and enables an encrypted connection between a web server and a browser. Without a valid certificate, browsers display security warnings that erode visitor trust and can hurt search engine rankings.
Why Should You Regularly Check SSL Certificates?
- Prevent Downtime: An expired certificate triggers browser warnings, blocking visitors and breaking API integrations.
- SEO Impact: Google uses HTTPS as a ranking signal. A broken certificate can cause indexing issues.
- Compliance: PCI-DSS, HIPAA, and SOC 2 require valid encryption for data in transit.
- Supply Chain Security: Verify that third-party services your systems depend on maintain valid certificates.
How This Tool Works
Our checker securely connects to your domain and inspects the presented certificate chain in real-time. No software to install and results are instant and completely free.
Common SSL Certificate Problems
- Expired certificate:The most common issue. Browsers display a full-page warning and most users will leave immediately. Set up automated monitoring or use an auto-renewing provider like Let's Encrypt or Cloudflare.
- Hostname mismatch: The certificate was issued for a different domain (e.g. www.example.com but not example.com). Check the Subject Alternative Names (SANs) to see which domains are covered.
- Self-signed certificate: The certificate was not issued by a publicly trusted CA. Browsers will block access. Replace it with a certificate from a trusted provider.
- Incomplete certificate chain: The server is not sending the intermediate CA certificates. Some browsers can fetch missing intermediates, but others (especially mobile) will show an error.
- Mixed content: Your page loads over HTTPS but includes resources (images, scripts) over HTTP. This triggers browser warnings and can break functionality.
- Weak protocol or cipher: Using TLS 1.0 or 1.1 (deprecated) or weak cipher suites. Modern best practice is TLS 1.2+ with strong ciphers only.
Need Automated SSL Monitoring?
This free tool checks a certificate once. But certificates expire, issuers change, and misconfigurations happen without warning. ShieldMarc runs daily automated checks across all your domains and alerts you before a cert expires or a chain breaks. One dashboard, every domain. Join the early access list to get onboarded before launch with up to 90 days free.
Want the full picture?
Our Security Grade scans SSL/TLS alongside DMARC, SPF, DNSSEC, registration, and expiry across your primary and alternate brand domains in one click.
Frequently Asked Questions
How often should I check my SSL certificate?
At minimum, check monthly. Certificates from traditional CAs typically last 1 year, while Let's Encrypt certificates last 90 days. With the industry moving towards shorter certificate lifetimes (as short as 47 days), automated monitoring is increasingly important. Use our SSL Monitor for daily automated checks.
What is the difference between SSL and TLS?
SSL (Secure Sockets Layer) is the predecessor to TLS (Transport Layer Security). SSL versions 1.0 through 3.0 are all deprecated and insecure. Modern "SSL certificates" actually use TLS 1.2 or 1.3. The term "SSL" persists in common usage, but TLS is the correct protocol name.
Do I need an SSL certificate if my site does not handle sensitive data?
Yes. Google uses HTTPS as a ranking signal, browsers mark HTTP sites as "Not Secure", and even static sites benefit from encryption to prevent content injection by ISPs or network operators. Free certificates from Let's Encrypt or Cloudflare make there no reason not to use HTTPS.
Does SSL affect my Security Grade?
Yes. A valid SSL certificate is one of the checks in the Security Grade Checker. Domains with an active web presence are expected to have a valid certificate with 15+ days remaining (or one from an auto-renewing provider) to pass.