TLS Certificate Checker
Show a public host certificate and its expiry, within what the hosting environment can do.
Your result
Type a host and press Look up to see its certificate.
How to use it
- Type a public hostname.
- Press Look up.
- Read the dates and the trust line.
Examples
- Recorded unverified layoutexample.test subject: smart.example issuer: Example CA notBefore: 2026-01-01 notAfter: 2027-01-01 trust: this host could not verify the chain
- Recorded verified layoutwww.example.test subject: www.example.test issuer: Example CA notBefore: 2026-01-01 notAfter: 2027-01-01 trust: verified by this host
- Recorded earlier datesmail.example.test subject: mail.example.test issuer: Example CA notBefore: 2025-06-01 notAfter: 2026-06-01 trust: verified by this host
Tool details and privacy
Type one hostname. This site connects to port 443 and shows the subject, the issuer, and the dates. The trust line says whether this host could verify the chain. A failed connection is an error, not a passing result.
The dates answer whether the certificate is current. The trust line does not say the site is safe, and this server may be unable to verify the chain.
Options
- Port 443 only.
- The result is cached for about one hour.
- The samples below are recorded layouts. A live check can differ, including a failed connection.
Limits
- A private address is not connected.
- Verification failure is stated. It is not hidden and it is not a safety claim.
- An IP address is refused.
Privacy
What you type is sent to this site so it can ask a public service or DNS. It is not stored in the tool analytics. A failed lookup is an error, not a made-up result.
Questions
Does a failed connection become a passing result?
No. It is an error.
Does verified mean the site is safe?
No. It only says whether this host could verify the chain.
Which port is checked?
443 only.
Can the check fail on this server?
Yes. The page says so instead of hiding it.