Check Your SSL Certificate in Seconds
Validate your SSL/TLS certificate — expiry, trust chain, TLS version, cipher strength, HTTPS enforcement, and subdomain coverage — and get a clear grade with fixes before a browser warning scares visitors away.
Free instant check · No signup needed · See how it works
What the SSL Check Covers
Every certificate and TLS setting a browser (or attacker) evaluates first.
Certificate Validity
Expiry date, trust chain, domain match, and revocation — the issues that trigger browser warnings.
TLS Configuration
TLS version (flags 1.0/1.1), cipher suite strength, and forward secrecy — the settings attackers downgrade.
HTTPS Enforcement
Whether HTTP redirects to HTTPS, redirect type (301 vs 302), and HSTS to prevent downgrade.
Subdomain Coverage
Whether your certificate covers www and other subdomains, and where coverage gaps expose users.
How It Works
Enter your domain
No agents, no config — just your domain name.
We run the checks
Every check runs concurrently and finishes in under 2 minutes.
Get your grade + fixes
A clear A–F grade with prioritised, step-by-step remediation.
SSL Checker — FAQ
Is the SSL checker free?
Yes. The SSL/TLS check runs free as part of a full domain scan — certificate validity, expiry, TLS version, cipher strength, HTTPS redirects, and subdomain coverage — with a grade and fixes. No credit card required.
How do I check if my SSL certificate is valid?
Enter your domain and we validate the certificate chain, expiry date, domain match, and TLS configuration externally — the same way a browser or attacker sees it. You get a pass/fail on each with remediation steps.
What TLS version should my site use?
TLS 1.2 minimum, ideally with TLS 1.3 enabled. TLS 1.0 and 1.1 are deprecated and vulnerable to downgrade attacks — the checker flags them as insecure.
My certificate is valid but the check fails — why?
The usual causes are a missing intermediate certificate in the chain, a cert that doesn't cover the exact hostname, or no HTTP-to-HTTPS redirect. The scan pinpoints which one and how to fix it.
How often should I check my SSL certificate?
Continuously. Certificates expire (every 90 days for Let's Encrypt) and configs drift. SecurityStatus can monitor and alert you before expiry rather than relying on one-off checks.
Check Your SSL Grade Now
Free, external, and instant — catch expiry, weak TLS, and chain issues before your visitors do.
Check My SSL Free