Check SSL Certificate
Enter a domain to check its SSL/TLS certificate and security grade
- SSL/TLS certificate validity and trust chain
- Certificate expiration date and days remaining
- TLS protocol version (1.2, 1.3)
- Cipher suite and encryption strength
- Domain name matching (CN and SANs)
- Certificate issuer and serial number
- Protects data in transit between users and your server
- Required for HTTPS — browsers warn users without it
- SEO ranking factor — Google favors HTTPS sites
- Builds trust with visitors via the padlock icon
- Required for HTTP/2 and modern web APIs
- Expired certificates drive visitors away
Get the full WebScore report
This free tool checks your certificate once. Get a complete security audit with SSL monitoring, header analysis, and vulnerability checks for $3, or subscribe from $9/mo for automated alerts and tracking.
Scan free, no credit card required. Unlock full reports from $3 each or subscribe from $9/mo.
What This Tool Checks
Our SSL checker connects to your server, inspects the certificate and TLS configuration, and gives you a detailed security report. It checks everything a browser checks — plus more.
Certificate Validity
Verifies your certificate hasn't expired, matches your domain name, and is issued by a trusted Certificate Authority. Expired certificates trigger browser warnings that scare away visitors.
Certificate Chain
Validates the full certificate chain from your domain certificate to the root CA. An incomplete chain causes SSL errors in some browsers and devices, even if the certificate itself is valid.
Protocol Versions
Checks which TLS versions your server supports. TLS 1.2 is the minimum acceptable. TLS 1.0 and 1.1 are deprecated and should be disabled. TLS 1.3 is recommended for best security and speed.
Expiration Warning
Shows exactly when your certificate expires and warns you if it's approaching expiration. An expired SSL certificate is one of the most common causes of website downtime.
Why SSL/TLS Matters
HTTPS is a confirmed Google ranking factor — sites without SSL certificates are penalized in search results. More importantly, browsers show a "Not Secure" warning for HTTP sites, which tanks user trust and increases bounce rates. Chrome, Firefox, and Safari all block mixed content (HTTP resources on HTTPS pages) by default.
Beyond rankings and trust signals, SSL/TLS encrypts all data between your server and visitors' browsers. Without it, login credentials, payment information, and personal data travel in plain text — visible to anyone monitoring the network.
Common SSL Issues
- Expired certificate — The most common issue. Set up auto-renewal with Let's Encrypt or your hosting provider to prevent this.
- Mixed content — Your page loads over HTTPS but includes HTTP resources (images, scripts, stylesheets). Fix by updating all URLs to HTTPS.
- Outdated TLS version — Still supporting TLS 1.0 or 1.1. Disable these in your server configuration and require TLS 1.2+.
- Missing HSTS header — Without HSTS, browsers may still attempt HTTP connections before redirecting. Add the Strict-Transport-Security header to force HTTPS.
Check Your Full Security Setup
SSL is one part of website security. For a complete security audit including HTTP headers (CSP, HSTS, X-Frame-Options), email authentication, and vulnerability scanning, run a full WebScore scan — free to scan, with detailed reports for $3 each.