Skip to content
XUtilHub

SSL Checker – Test an SSL Certificate & Expiry Date

Check any website's SSL certificate: whether it's valid and trusted, when it expires, who issued it, which domains it covers, the TLS version and the full chain.

  • Free, no sign-up
  • Checked from our server, nothing stored

About the SSL Checker

Make sure a site's HTTPS is set up properly. The checker connects to the server and reports whether the certificate is trusted, how many days are left, the issuer, covered domain names, the TLS version and cipher, and the certificate chain.

Key features

  • Trusted or not, with the reason
  • Days until expiry
  • Issuer and covered domains
  • TLS version and cipher
  • Full certificate chain
  • Spots missing intermediates

Test a website's HTTPS

An SSL (TLS) certificate encrypts the connection between visitors and a website and proves the site is genuine. The checker connects to the server on port 443 just like a browser does and reports any problems browsers would warn about.

What the results mean

ResultWhat to do
Valid, 30+ days leftNothing; make sure auto-renewal is on
Expiring soonRenew now, or check why auto-renewal failed
ExpiredRenew immediately; visitors see a full-page warning
Name mismatchAdd the missing name (often www) to the certificate
Intermediate missingInstall the full chain (fullchain.pem) on the server
Self-signedReplace with a certificate from a trusted CA such as Let's Encrypt

HTTP headers checker, DNS lookup and redirect checker.

How to use the SSL Checker

  1. Enter a domain name or URL, such as example.com.
  2. Click the button, or try one of the examples.
  3. Our server runs the check and shows the results in a few seconds.
  4. Copy the results, or share the page link, which includes your query.

Frequently asked questions

Why does my site show 'Not secure' when it has a certificate?

Common causes are an expired certificate, a certificate for a different name (such as example.com but not www.example.com), a missing intermediate certificate, or pages that load images and scripts over plain http.

How long do SSL certificates last?

Today, at most 398 days, and Let's Encrypt certificates last 90 days. The maximum is being reduced further over the next few years, so automatic renewal is strongly recommended.

What is a missing intermediate certificate?

Certificates are signed by an intermediate, which is signed by a trusted root. The server must send the intermediate too. Desktop browsers sometimes fix the gap, but phones and apps often show errors.

Is TLS 1.0 or 1.1 still safe?

No. Both are deprecated and blocked by modern browsers. Servers should offer TLS 1.2 and 1.3 only.

Are these network tools free?

Yes. All tools are free with no sign-up. To keep them fast for everyone, each visitor can run about 30 checks of each kind every five minutes.

Do you store the domains I check?

No. Lookups are run on demand and the results aren't saved. Your own IP address isn't stored either.

Where do the results come from?

DNS lookups query public resolvers (Cloudflare, Google and Quad9), WHOIS data comes from each registry's official RDAP or WHOIS service, and SSL and HTTP checks connect to the website directly from our server.

Can I check sites on my local network?

No. For security, our server only connects to public internet addresses, so localhost, 192.168.x.x and other private addresses are refused. The subnet calculator works with any address because it runs in your browser.

Last updated:

Related Network tools

HTTP Headers CheckerNEW

See the HTTP response headers of any URL, the status code and response time, and grade its security headers: HSTS, CSP, X-Frame-Options and more.

Redirect CheckerNEW

Trace every redirect from a URL to its final page, with status codes (301, 302, 307, 308) and timings. Find redirect chains that hurt SEO and speed.

Is It Down?NEW

Check if a website is down for everyone or just you. See the status code and response time from our server, and what to try if it only fails for you.

Subnet CalculatorNEW

Calculate IPv4 subnets: network and broadcast address, usable host range, subnet and wildcard masks, host count, and split networks into smaller subnets.

What Is My IPNEW

See your public IP address instantly, whether it's IPv4 or IPv6, plus the browser, language, time zone and screen details websites can see.

DNS LookupNEW

Look up the DNS records of any domain: A, AAAA, CNAME, MX, NS, TXT, SOA and CAA, with TTLs. Reverse DNS for IP addresses. Free and instant.

WHOIS LookupNEW

Find when a domain was registered, how old it is, when it expires, its registrar and name servers. Works for .com, .pk, .in, .co.uk and most other domains.