SSL Checker
Check if a website’s SSL certificate is valid, trusted and correctly installed. See the expiry date, issuer, chain and what to fix.
A broken or expired SSL certificate shows visitors a scary “Your connection is not private” warning, and most of them leave. GoogieHost’s free SSL Checker tells you in seconds whether a website’s certificate is valid, trusted and installed correctly, and when it expires.
Enter any domain to see the certificate’s issuer, expiry date, the domain names it covers, its key and TLS version, and the full certificate chain. If something is wrong, the tool tells you exactly what and how to fix it.
What the SSL Checker Tests
| Check | Why it matters |
|---|---|
| Trusted by browsers | The certificate must chain up to a root certificate that browsers trust, or visitors get a security warning. |
| Covers the domain | The domain you enter must be listed in the certificate (Common Name or SANs), or browsers show a name mismatch error. |
| Expiry date | Shows the exact expiry date and days left, with a warning when fewer than 14 days remain. |
| Intermediate certificate | Checks that your server sends the intermediate certificate(s). A missing intermediate breaks SSL on many phones and apps. |
| Certificate details | Issuer, validation type (DV, OV or EV), key type and size, signature algorithm and serial number. |
| TLS connection | The TLS version (such as TLS 1.3) and cipher the server negotiated. |
| Certificate chain | Every certificate the server sent, from your server certificate up to the root. |
How to Use the SSL Checker
- Enter a domain: Type example.com, a subdomain, or paste a full URL. To check another TLS port, add it, for example mail.example.com:993.
- Click Check SSL: The tool connects to the server just like a browser does.
- Read the result: A green banner means everything is fine. Red or amber explains the problem in plain English.
Supported ports: 443 (HTTPS), 8443, 465 (SMTPS), 993 (IMAPS), 995 (POP3S) and cPanel ports 2083, 2087 and 2096.
SSL vs TLS: What’s the Difference?
SSL (Secure Sockets Layer) was the original protocol for encrypting website traffic. It was replaced by TLS (Transport Layer Security), and every version of SSL is now insecure and disabled. People still say “SSL certificate” out of habit, but modern sites actually use TLS 1.2 or TLS 1.3. The certificate itself works the same either way.
Common SSL Errors and How to Fix Them
| Problem | What you see | How to fix it |
|---|---|---|
| Certificate expired | NET::ERR_CERT_DATE_INVALID | Renew the certificate. On cPanel, run AutoSSL; with Let’s Encrypt, check that automatic renewal (certbot or your host’s tool) is working. |
| Incomplete chain | Works on desktop Chrome but fails on phones, apps or curl | Install the intermediate (CA bundle) certificate from your provider together with your certificate. |
| Name mismatch | NET::ERR_CERT_COMMON_NAME_INVALID | Issue a certificate that includes the domain, e.g. both example.com and www.example.com, or use a wildcard. |
| Self-signed | NET::ERR_CERT_AUTHORITY_INVALID | Replace it with a certificate from a trusted CA. Let’s Encrypt is free. |
| Untrusted CA | Certificate not trusted | Use a certificate from a publicly trusted certificate authority. |
| Mixed content | Padlock missing even though SSL is valid | The page loads images or scripts over http://. Change them to https://. |
After moving a site to a new server, the old certificate may still be cached in DNS for a while. Check that your domain already points to the new server with our DNS Propagation Checker.
DV vs OV vs EV Certificates
| Type | What is verified | Good for |
|---|---|---|
| Domain Validated (DV) | Only that you control the domain | Blogs, small business sites, most websites (Let’s Encrypt, AutoSSL) |
| Organization Validated (OV) | The domain plus the company’s identity | Business and e-commerce sites that want the company name in the certificate |
| Extended Validation (EV) | A full legal and identity check of the company | Banks and large organisations |
All three give the same encryption. Browsers no longer show a green bar for EV, so for most sites a free DV certificate is enough.
How Long Is an SSL Certificate Valid?
Certificate lifetimes are getting shorter. Under the CA/Browser Forum rules, public certificates issued from 15 March 2026 can be valid for at most 200 days, dropping to 100 days in 2027 and 47 days in 2029. Free Let’s Encrypt certificates last 90 days. Because of this, automatic renewal matters more than ever. Bookmark this page and check your sites regularly.
How to Get a Free SSL Certificate
- Let’s Encrypt: Free, trusted DV certificates, renewed automatically with tools like certbot.
- cPanel AutoSSL: Most cPanel hosts issue and renew free certificates for every domain automatically.
- Cloudflare: Free SSL between visitors and Cloudflare’s network.
- GoogieHost free hosting: Every account includes a free SSL certificate set up for you.
Want to see which company hosts a website before you contact them about SSL? Use our Hosting Checker. For email server certificates, also check your mail records with the MX Lookup.
FAQs
How do I check if an SSL certificate is valid?
Enter the domain in this SSL Checker. It connects to the server, verifies the certificate against trusted root authorities and the domain name, and shows whether it is valid, trusted and when it expires.
How do I check when my SSL certificate expires?
Run the check. The result shows the exact “Valid Until” date and the number of days remaining. You can also click the padlock in your browser and open the certificate details.
Why does my site say “Not Secure” even though I have SSL?
Either the certificate has a problem this tool will show (expired, wrong name, missing intermediate), or the page loads some files over http://, which is called mixed content.
What is an intermediate certificate?
Certificate authorities sign your certificate with an intermediate certificate, which is signed by a trusted root. Your server must send the intermediate, otherwise many devices cannot build the chain and show an error.
Can I check an SSL certificate on a port other than 443?
Yes. Add the port to the domain, such as mail.example.com:993. Ports 443, 8443, 465, 993, 995, 2083, 2087 and 2096 are supported.
Is a free SSL certificate as secure as a paid one?
Yes. Free DV certificates such as Let’s Encrypt use the same encryption as paid ones. Paid OV and EV certificates add company verification and support, not stronger encryption.
What does TLS 1.3 mean?
TLS 1.3 is the newest version of the protocol that encrypts HTTPS traffic. It is faster and more secure than TLS 1.2. Seeing TLS 1.3 in the results is a good sign.
Is this SSL checker free?
Yes. It is free with no signup, and you can check as many sites as you like within a fair-use limit of a few checks per minute.
