SSL Certificate Checker
Check any certificate's expiry, issuer, chain, key strength, TLS version and hostname coverage. Then see the other public names under your domain, and which ones carry problems.
Free, no account, nothing installed. Read-only - the checker never changes anything.
What an SSL certificate check should tell you
Most checkers answer one question: when does this expire? That is the easy part, and only half the risk. A certificate can be in date and still be broken - an incomplete chain, a weak key, a name it does not actually cover, an old TLS version still offered. SSLScan grades all of it, in plain language.
The certificate itself
Expiry and days remaining, issuer, key algorithm and size, signature algorithm, and the TLS version the server offers.
Whether it actually works
Is the chain complete and trusted? Does the certificate cover the hostname you asked for? Is it self-signed on a public address?
The names you forgot
Every other public name under your domain, surfaced from Certificate Transparency logs and checked live - the shadow endpoints you never entered.
What breaks next
With certificate lifetimes falling to 47 days, one check is a snapshot. Monitoring turns it into a warning before anything expires. Why now →
SSL checker FAQ
Is the SSL checker free?
Yes. Checking a domain here is free and needs no account. A free SSLScan account lets you keep monitoring the names you found, with alerts before anything expires.
Do you need access to my server?
No. The checker reads certificates the way a browser does - it opens a TLS connection and looks at what the server presents. No credentials, no SSH, no agent. It is read-only and never touches your private key.
What does the SSL checker check?
Expiry and days remaining, the issuer, whether the chain is complete and trusted, key algorithm and size, signature algorithm, the TLS version offered, and whether the certificate actually covers the hostname. It then discovers other public names under your domain from Certificate Transparency and reports how many carry problems.
How is this different from other SSL checkers?
Most checkers grade the one host you type. SSLScan also finds the shadow subdomains you never entered - from public Certificate Transparency logs - and checks each one live, so you see the whole estate, not just the address you remembered.