Free website tool
SSL check for your website
Use this free SSL check to see whether the certificate of a website is valid: trusted, issued for the right name and not expired. Enter a domain and you see the issuer, the expiry date, the days left and the TLS version in seconds.
Free, no account needed
What does an SSL check show?
An SSL check connects to a website the way a browser does and reads its certificate. This tool tells you whether the certificate is trusted, whether it covers the domain you entered and whether today falls within its validity period. It also shows the issuer, the dates, the days left, the TLS version and every name the certificate covers.
What the SSL check looks at
The tool sets up a secure connection to the website and checks the certificate the server sends. A certificate only counts as valid when all three basics are right: trust, name and dates.
- Trust: whether the certificate leads back to an authority browsers trust
- Name: whether the certificate covers the domain you entered; a wildcard such as *.example.com covers www.example.com, but not example.com itself
- Validity: whether today falls between the start and end date
- Days left until the certificate expires
- Protocol: the TLS version the server agreed on
- Covers: every domain name listed in the certificate
How to read the result
Green: the certificate is valid and nothing needs attention. Orange: it is valid, but it expires within 14 days or the server uses an outdated protocol. Red: browsers show visitors a security warning instead of your site.
TLS 1.0 and 1.1 are formally deprecated: RFC 8996 says they must not be used. Use TLS 1.2 or TLS 1.3.
Certificates are getting shorter lives. Let's Encrypt certificates are valid for 90 days by default, and the CA/Browser Forum decided to bring the maximum validity of public certificates down from 398 days to 47 days, in steps between March 2026 and March 2029. Automatic renewal is the only practical way to keep up.
Common mistakes
An SSL warning scares visitors away, and the cause is usually small.
- A certificate for example.com only, while visitors also use www.example.com, or the other way round
- Renewing by hand and forgetting it
- A CAA record that leaves out the authority that renews your certificate
- Pointing the domain to a new server before that server has a certificate for it
- Old server settings that still allow TLS 1.0 or 1.1
What to do next
A red result usually means the certificate has expired, does not cover the name, or does not come from a trusted authority. Ask your host for a certificate that covers every name your visitors use, and for automatic renewal.
With SitePack you do not have to think about it: SSL is included in every package, and SitePack issues and renews the certificate for domains on its name servers. Run this check again afterwards to confirm the result is green.
How to use the SSL check
-
Enter the domain
Type the domain of your website, for example yourbusiness.com.
-
Run the check
Click the button. The tool connects to the website and reads the certificate.
-
Read the card
Check the colour, the expiry date and the names under Covers. Advice appears on the card when something needs attention.
-
Check the other name too
Run the check for www as well, or without www, because visitors can use both.
Questions about the SSL check
Is this SSL check free?
Yes, free and without an account. If you run many checks in a short time, the tool may ask you to wait a moment.
How long is an SSL certificate valid?
That depends on the issuer. Let's Encrypt issues certificates for 90 days by default and recommends renewing every 60 days. For all public certificates the maximum validity goes down from 398 days to 47 days between March 2026 and March 2029.
What does it mean when the certificate is not issued for my domain?
The certificate is valid, but for other names. Browsers then show a warning. Check that the domain points to the right server, and ask your host for a certificate that includes the name you entered.
Is TLS 1.2 still good enough?
Yes. TLS 1.0 and 1.1 are deprecated (RFC 8996); TLS 1.2 and TLS 1.3 are the versions to use.
Does the check work for a website behind a CDN?
Yes. The tool reads the certificate your visitors actually receive, which for a site behind a CDN is the certificate of the CDN.
Do I pay extra for SSL at SitePack?
No. SSL is included in every package, and the certificate is renewed automatically for domains on SitePack's name servers.
More tools and guides
SSL included and renewed for you
A SitePack website starts at €15 a month, billed yearly, with one domain, SSL, EU hosting and daily backups included. Try it free for 14 days, without payment details.