SSL Tools

SSL Certificate Checker

Inspect any website's SSL/TLS certificate — issuer, expiry, trust chain, key algorithm, and more.

Enter domain name (e.g. google.com). Port 443 will be used by default.

About SSL Certificate Checking

The checker reports the certificate issuer, subject, validity dates, days remaining, Subject Alternative Names (SANs), key algorithm, signature algorithm, fingerprint, and the full certificate chain trust status.
A certificate may be untrusted if it's expired, self-signed, issued by an unknown CA, or if the hostname doesn't match the certificate's domain names. A broken certificate chain (missing intermediate) is a common cause.
The certificate chain links your end-entity certificate back to a trusted root CA through one or more intermediate certificates. Browsers verify this chain to establish trust. A missing intermediate is a common misconfiguration.