SSL Certificate Checker
Enter a domain to check its SSL/TLS certificate: whether browsers trust it, when it expires, the full chain and which TLS versions the server accepts.
How it works
What the SSL checker looks at
Trust and name
We connect to the server like a browser, send the domain name (SNI) and verify the certificate against the public root store. The name you entered must appear in the certificate's SAN list.
Expiry and chain
The checker shows how many days are left and every certificate the server sends. A missing intermediate certificate is the most common reason a site works in one browser but not in another.
TLS versions
Modern servers should accept TLS 1.2 and TLS 1.3. TLS 1.0 and 1.1 are deprecated and are flagged when the server still accepts them.
FAQ
Frequently asked questions
Why does my certificate show as not trusted?
Usually the server does not send its intermediate certificate, the certificate has expired, or it was issued for a different name. Install the full chain from your certificate authority and check that the domain is in the SAN list.
Can I check mail and other TLS ports?
Yes. Pick a port such as 465 (SMTPS), 993 (IMAPS), 995 (POP3S) or 8443 to check TLS services other than HTTPS.
How often should I check?
Check after every renewal or server change. Certificates issued through Yeap Cloud renew automatically, so you do not need to watch the expiry date yourself.
More free tools
All toolsDV, OV and EV from trusted CAs