How to check an SSL certificate
Review certificate validity, identity, and expiration for a public HTTPS site.
The short answer
Check that the certificate is valid for the hostname, issued by a trusted authority, and not close to expiration.
Step by step
- Enter the public HTTPS hostname.
- Run SSL Checker.
- Review issuer, subject, SAN entries, and remaining validity.
- Test the final HTTPS URL separately if redirects are involved.
Technical details
- The hostname must appear in the certificate's subject alternative names. Certificate validity does not by itself prove that every TLS setting is ideal.
Common mistakes
- Checking the wrong hostname behind a redirect.
- Confusing certificate expiry with domain registration expiry.
- Ignoring intermediate certificate or client compatibility issues.
Limitations
- Browser-safe certificate checks expose a focused view and do not replace a full TLS configuration assessment.
Related SiteIndex tool
Use SSL Checker for the practical check described here.
Open SSL CheckerRead its documentation