Skip to content

AI-powered

SSL Checker: Check a site's certificate and domain before they expire

An SSL checker that reads a site's certificate and chain and looks up when the domain expires, so nothing lapses by surprise.

AvailableReady to use.

Open the tool
example.comSample data
CheckFoundResult
CertificateExpires in 54 daysValid
Covers wwwYesPassed
ChainCompletePassed
DomainExpires in 19 daysWarning

AI in this tool

AI explains chain and protocol problems in plain words. Dates and names come from the certificate itself.

What you can do

  • See who issued a site's certificate and when it expires.
  • Check that the certificate covers the host and its www version.
  • Find a missing intermediate certificate in the chain.
  • See which TLS versions the server accepts.
  • Look up when the domain itself expires.

What happens during a check

  1. Connect

    A secure connection is opened to the site.

  2. Read the certificate

    The issuer, dates, names and full chain are read.

  3. Check the domain

    The registry's expiry date for the domain is looked up.

  4. Report

    Days left, and anything that would break the padlock.

Default settings

Port
443
Reads
Certificate, chain, TLS versions
Domain expiry
From the registry
Access needed
None

Coming next

  • Watched all the time with Uptime Monitor
  • Alerts before anything expires

What is an SSL checker?

An SSL checker connects to a site the way a browser does and reads its certificate: who issued it, which names it covers and when it expires. The certificate is what puts the padlock in the address bar and keeps the connection private.

When a certificate expires or doesn't match the site's name, browsers show a full page warning and most visitors leave.

What does it check?

The certificate's dates and days left, the names it covers, whether the full chain of certificates is sent, which TLS versions the server accepts, and whether plain HTTP sends visitors to HTTPS.

It also looks up when the domain itself expires, because a lapsed domain takes the site and its email down even with a valid certificate.

Common certificate problems

A missing intermediate certificate works in some browsers and fails in others. A certificate for example.com that doesn't cover www.example.com breaks one of the two addresses. Automatic renewal that silently stopped is the most common cause of an expired certificate.

Never miss an expiry

This check shows the state today. Uptime Monitor reads the certificate and the domain on every check and warns you weeks before either expires.

Questions, answered

Why check the domain too?

An expired domain takes the whole site and its email down, even with a valid certificate.

Do you need access to my server?

No. We read what every visitor's browser sees.

How early should I renew?

Most certificates renew on their own. Check that renewal works at least two weeks before expiry.

Is SSL the same as TLS?

TLS is the modern version of SSL. People still say SSL for both.