SSL/TLS Checker
Inspect the certificate, expiry, chain, supported protocols (TLS 1.0–1.3) and cipher.
About this tool
The SSL/TLS Checker inspects a domain's certificate: issuer, validity, expiry, trust chain, supported protocols (TLS 1.0 to 1.3) and the negotiated cipher. Ideal to get ahead of expirations and spot insecure configurations.
- Warns about the expiry date so you renew before the site stops loading.
- Detects whether you still accept outdated protocols like TLS 1.0/1.1.
- Confirms the certificate chain is complete and correctly ordered.
Frequently asked questions
How often does an SSL certificate expire?
Modern public certificates last at most 398 days, and Let's Encrypt ones 90 days. Automating renewal and monitoring expiry is the way to avoid outages.
Which TLS protocols should I keep enabled?
TLS 1.2 and TLS 1.3. TLS 1.0 and 1.1 are deprecated and disabled by browsers; keeping them on is a security and compliance risk.
What is the certificate chain?
It is the sequence linking your certificate to a trusted root authority through intermediate certificates. If an intermediate is missing, some clients will error out even if the certificate is valid.