Check whether a site’s certificate is trusted, when it expires and which names it covers.
Loading the tool…
What the results mean
- Trusted: browsers accept the certificate, so visitors see the padlock.
- Days left: renew well before this reaches zero, or visitors will see a warning.
- Covers this name: the certificate must list the exact domain, or a matching wildcard such as *.example.com.
- Chain: the certificates linking yours to a trusted authority. A missing middle certificate is a common cause of errors on some phones.
Certificates are getting shorter
| Issued from | Maximum validity |
|---|---|
| 15 March 2026 | 200 days |
| 15 March 2027 | 100 days |
| 15 March 2029 | 47 days |
Set up automatic renewal with your host. Most hosts and Let’s Encrypt do this for you.
How the check works
Your browser sends the address to our server, which makes the request and sends back the result. We don’t keep the addresses you check. To stop misuse, each visitor can run about 20 checks a minute.
Frequently asked questions
Why is it not trusted?
It may be self-signed, expired, for another name, or missing an intermediate certificate.
Does it check port 443 only?
Yes, the standard HTTPS port.
Is the domain stored?
No.
Sources
Last updated: