DotComPals - Come, grow with the web

SSL Certificate Checker

Check that HTTPS connects with a valid certificate, and see when the newest certificate for your domain expires.

Enter a domain only, no http:// needed.

How this works

  1. We make a live HTTPS request to your domain. If the certificate is expired, mismatched or missing, the connection fails and we report it.
  2. We look up the newest certificate in public Certificate Transparency logs to estimate the expiry date and issuer.
  3. We warn when expiry is within 30 days, since auto-renewal failures are the usual cause of surprise outages.

Frequently asked questions

Why does the expiry date come from public logs?

Our servers cannot read the certificate your server presents directly. Public logs list every certificate issued, so the newest one is a good estimate but not proof.

My site shows "Not secure". Why?

Common causes are an expired certificate, a certificate for the wrong name, or a page loading images or scripts over plain HTTP.

Do free SSL certificates expire?

Yes. Let's Encrypt certificates last 90 days and renew automatically if set up correctly. Check that renewal runs.

Does Cloudflare handle SSL for me?

Cloudflare gives visitors a certificate, but the link from Cloudflare to your server needs a valid certificate too (Full strict mode).

More free tools

DNS Checker | Who Is Hosting This Website | Email DNS Checker (SPF, DKIM, DMARC) | All free tools