Free SSL tool·Live TLS handshake check

Check any SSL certificate live

Run a free SSL certificate checker on any domain: live TLS handshake, issuer and expiry date, days remaining, certificate chain review and 30-day expiry warnings — no signup needed.

Live TLS handshake
A+ to F grading
Enter a domain to check its SSL certificate.
Try google.com, github.com, or your own domain.
What you get

Every SSL check, decoded

One scan shows your certificate's health, from chain to expiry.

Live TLS handshake

We connect to your server exactly like a browser does, so results reflect what visitors actually experience — not a cached record.

Expiry countdown

See your SSL certificate expiry date with days remaining, plus warnings when you're within 30 days of expiry.

Certificate chain review

Verify the full chain of trust — leaf, intermediate and root — to catch misconfigured certificates that browsers distrust.

A+–F security grade

Get an A+–F grade for your certificate setup, with clear notes on what to fix to reach the top.

Stop second-guessing.

Find your domain in the next 30 seconds.

Free forever. No login required. 1,100+ TLDs in one query — plus AI suggestions and the premium marketplace.

1,147
TLDs
200ms
Avg lookup
100
Suggestions/query
FAQ

SSL certificate checker FAQs

Enter the domain into the checker and run a scan. The tool performs a live TLS handshake, then shows the issuer, expiry date, days remaining, certificate chain, and an A+–F grade. It takes seconds, works on any public website, and needs no signup.
Run a scan on your domain — the expiry date and days remaining appear at the top of the report. You'll also get a warning when your certificate is within 30 days of expiry. That matters now: maximum certificate validity has dropped to 200 days, so renewal cycles are shorter than ever.
Browsers show a full-page "your connection is not private" warning that turns away most visitors, secure transactions stop, and search engines can downgrade your rankings. With validity now capped at 200 days, certificates lapse faster — checking your expiry date regularly prevents surprise downtime.
A certificate chain links your site's certificate through intermediate certificates to a trusted root. If any link is missing or misordered, browsers can't verify trust and show security errors. The checker inspects every link so you can spot chain problems before visitors do.
The checker works for any publicly reachable domain or subdomain with HTTPS enabled — just enter the full hostname. It only scans public hosts, so private-network or internal sites can't be checked from here. For those, inspect the certificate directly on the server instead.
Check at least monthly, and automate renewals wherever possible. With maximum validity now 200 days, manual renewals lapse quickly — the 30-day expiry warning is your safety net, but a recurring check keeps short-lived certificates from catching you off guard.