Free tool
is your ssl certificate ok?
Check any site’s live HTTPS certificate — who it is for, when it expires, and whether browsers trust it. No sign-up, no email.
what the checker is telling you.
What a certificate proves
It encrypts the connection between a visitor and the site, and vouches that the site really is the domain it claims to be. Without a valid one, browsers show a warning instead of the page.
What “expires” means
Every certificate has a validity window and stops working at the end of it. Let's Encrypt certificates are short-lived by design and renew automatically — so a genuine expiry usually means renewal stopped, not that it was left too long.
“Not trusted” and hostname mismatch
Not trusted means the chain does not lead to an authority browsers recognise — often a missing intermediate, or a self-signed certificate. A hostname mismatch means the certificate is real but does not list the exact address you visited.
ssl you don’t have to renew.
Every hosting plan includes a free Let’s Encrypt certificate that issues and renews itself automatically — no expiry to diarise, no lapse to catch. Need organisation validation or a wildcard across every subdomain? We sell those too.
ssl questions
What does this SSL checker tell me?
It connects to the site over HTTPS on port 443 and reads the certificate it presents: who it was issued to, who issued it, the dates it is valid between, how many days remain, whether the certificate chain is trusted, and whether it covers the exact hostname you entered.
My certificate is valid but the checker says it is not trusted — why?
The usual cause is a missing intermediate certificate, which leaves the chain incomplete: your certificate is fine, but the browser cannot follow it back to a root it recognises. A self-signed certificate, or one from an authority browsers do not know, will also read as not trusted. Reinstalling the full chain your provider supplies normally fixes it.
What is a hostname mismatch?
The certificate is genuine but does not list the exact name you visited. A certificate for example.com does not automatically cover www.example.com unless www is listed as a subject alternative name or the certificate is a wildcard. When the name is not covered, the browser shows a warning even though the certificate itself is valid.
Do I have to renew a Let's Encrypt certificate myself?
Not when it is managed for you. On our hosting, Let's Encrypt certificates issue and renew automatically before they expire, on every plan. A certificate that has actually expired almost always means automatic renewal was never set up or has been failing quietly in the background.