Free SSL Checker
Enter a domain to check its SSL certificate the way a browser does. In a few seconds you'll see whether it's trusted, whether it covers the domain, how many days are left before it expires, who issued it, and the full certificate chain the server sends. It also catches a missing intermediate certificate, one of the most common installation mistakes. We don't store the results.
How it works
- 1
Enter the domain
Type the address, such as example.com or shop.example.com. You can paste a full URL; we use only the host name.
- 2
We connect over HTTPS
Our server opens a TLS connection on port 443 and reads the certificate and chain the site sends, like a browser.
- 3
Read the verdict
Green means valid and trusted. Amber means it expires within 30 days. Red lists each problem, such as expiry, a wrong name or a missing CA bundle.
- 4
Fix and monitor
Install the missing intermediate or renew the certificate, then check again. Add the domain to free SSL Monitoring to be warned before it expires.
Frequently asked questions
What does "the server isn't sending its intermediate certificate" mean?
Your server sends only the site certificate, not the CA bundle that links it to a trusted root. Some browsers fill the gap, but phones, apps and APIs often fail. Install the CA bundle (intermediate certificates) next to your certificate and restart the web server.
Why does it say the certificate doesn't cover my domain?
The certificate was issued for different names. A certificate for example.com doesn't cover shop.example.com unless that name is listed or it's a wildcard for *.example.com.
How long are SSL certificates valid?
Since 15 March 2026, publicly trusted certificates can be valid for at most 200 days, dropping to 100 days in March 2027 and 47 days in March 2029 under CA/Browser Forum rules. Multi-year plans include free reissues during the plan.
Can I check a site on a private network?
No. For safety the checker only connects to public internet addresses on port 443.
Need an SSL certificate?
DigiCert, Sectigo and RapidSSL certificates, paid in NPR with Khalti or in USD by card.