Utilore

SSL Certificate Checker

Enter a domain and see the certificate the way a browser sees it: the expiry date, the issuer, the covered names and — the part that matters — whether the chain actually validates.

The request goes to our server, not to a third-party service — the site you check never sees you.

How to use

  1. Enter the domain name, for example example.com.
  2. Press «Check».
  3. Read the days remaining and the list of covered names.

Good to know

«Trusted» is a different question from «present»

A certificate can exist and still fail: expired, issued for a different name, or signed by an authority the browser does not carry. Each of these produces the same red warning for a visitor and each has a different fix. The check runs a real validation first and, if it fails, reports the reason in the certificate's own words.

Expiry is the failure that is always avoidable

Certificates now last ninety days or less, and automatic renewal breaks quietly: a changed DNS record, a moved webroot, an expired API token. Nothing tells you until the site goes red for everyone. Two weeks of remaining validity is the point where a renewal that has not happened stops being a scheduling detail and starts being a problem.

Frequently asked questions

Why does it say the certificate is not trusted when my browser is fine with it?

Usually because the server sends the leaf certificate without the intermediate one. Browsers often fetch the missing link or have it cached; other clients — mobile apps, curl, payment systems — do not, and they fail.

What is the list of covered names for?

A certificate is valid only for the names inside it. If example.com is listed but www.example.com is not, half your visitors get a warning.

Can I check a port other than 443?

Yes — mail and database servers have certificates too. The check works wherever a TLS handshake is expected.

Does the site being checked see me?

No. The handshake is made by our server, and your address is never passed on.

Related tools