🔒 Security
Real-time inspectionDomain to check
Expiry, hostname coverage, key strength, signature algorithm, lifetime limit, self-signed detection and validation type — each marked pass, warning or fail.
A countdown and a lifetime bar, plus a calendar reminder you can download so a renewal never slips past you.
Issuer, key type and size, SHA-1 and SHA-256 fingerprints, serial and every covered name — copyable, with the PEM file one click away.
How it works: the domain you enter is looked up through the public networkcalc.com certificate API (with a fallback proxy if your network blocks it). The certificate is then decoded and checked in your browser. It reads the server's own certificate — it does not test the intermediate chain, protocol versions or cipher suites. Recent checks are kept on this device only.
Check any website's SSL certificate online — expiry date, issuer, TLS grade, and endpoint security in seconds. Free SSL test with no sign-up required.
Public certificates have a maximum lifetime, and it is getting shorter. Since September 2020 the limit has been 398 days. The CA/Browser Forum’s ballot SC-081 cuts it to 200 days for certificates issued from 15 March 2026, 100 days from 15 March 2027 and 47 days from 15 March 2029. The checker above applies the limit that was in force on the day a certificate was issued. Here is what it reports for a 90-day certificate and a one-year (397-day) certificate in each period.
| Certificate | Maximum | 90-day certificate | One-year certificate |
|---|---|---|---|
| Issued 1 Jun 2025 | 398 days | Passes | Passes |
| Issued 1 Jun 2026 | 200 days | Passes | Fails |
| Issued 1 Jun 2027 | 100 days | Passes | Fails |
| Issued 1 Jun 2029 | 47 days | Fails | Fails |
The practical upshot: renewals have to be automated. If you still renew by hand once a year, certificates issued from March 2026 already need replacing twice as often, and from 2029 every six or seven weeks. The checker’s countdown and calendar reminder help you see how much time is left.
An SSL checker (also called an SSL certificate checker or SSL test) is a tool that inspects the SSL/TLS certificate installed on a website. It tells you whether the certificate is valid, when the SSL certificate expires, who issued it, which domains it covers, and how strong the server's TLS configuration is. ToolAdda's free SSL Checker runs the test online in seconds — just enter a domain and click Check.
example.com) — no https:// needed.Enter your domain in the SSL Checker above and click Check. The results show the exact expiry date along with the issuer and validity period, so you can renew before it lapses.
Yes. ToolAdda's SSL Checker is completely free with no sign-up, no installation, and no limits for normal use.
The SSL grade (A+ to F) summarizes how secure a server's TLS configuration is, based on protocol versions, certificate strength, key exchange, and cipher support. An A or A+ indicates a strong, modern setup.
No. The tool only queries public TLS report data for the domain you enter, and the domain string is not stored on ToolAdda's servers.
Yes. You can analyze any publicly reachable domain, including subdomains. Private, internal, or firewalled hosts cannot be scanned.
Common causes include an expired certificate, a hostname mismatch, an incomplete certificate chain, or a self-signed certificate that browsers don't trust. The checker highlights these issues so you can fix them.
TLS (Transport Layer Security) is the modern successor to SSL (Secure Sockets Layer). SSL is deprecated, but the name stuck — today an "SSL certificate" actually secures connections using TLS 1.2 or TLS 1.3.
Initial scans may take up to 30 seconds while the endpoint is analyzed; cached results typically return within a few seconds.
Check monthly, and always after renewing a certificate or changing your server or CDN configuration. Set a reminder at least 30 days before your certificate's expiry date.
Explore more free browser-based tools on ToolAdda: Password Generator for secure random passwords, JWT Debugger to decode and verify JSON web tokens, UUID Generator for unique identifiers, PEM to PPK Converter and PPK to PEM Converter for SSH keys, and Internet Speed Test to measure your connection.