IA Internet AnalysisLog in
REAL SERVER-SIDE DIAGNOSTIC

SSL certificate checker

Inspect certificate validity, hostname, trust chain and expiry on port 443.

Only public destinations are allowed. A TLS handshake is made from this server; no HTTP request or credentials are sent.

How this check works

Enter a public domain. The server validates a public destination, makes a TLS 1.2-or-newer handshake on port 443 and checks the certificate against the hostname, validity dates and server trust store. No HTTP request or credentials are sent.

How to interpret the result

Read the validation result together with the issuer, certificate names, valid-from date, expiry, days remaining, presented chain length and negotiated TLS version. Validation failure may involve hostname coverage, expiry or the trust chain; a failed handshake is not a complete certificate report.

Free public tool, no account required. Results describe the named server endpoint and moment, not every network or region.

Read the method and next steps

Questions and limitations

Is a valid certificate proof that the website is secure?

No. This is one certificate observation from the Internet Analysis server. It does not perform revocation or OCSP checks, enumerate all protocols and ciphers, or audit the application.

Can I check a private or internal hostname?

No. Only validated public destinations on port 443 are allowed. CDN endpoints and trust stores can also produce different observations.