Check an SSL certificate
Enter a website to see its certificate: the issuer, the expiry date, the names it covers, whether the chain is complete and which TLS versions the server still accepts.
Free, no signup. Up to 10 checks a minute and 200 a day. We keep each answer for 10 minutes and store nothing else.
Certificates are meant to renew themselves, and usually do. OwlHound emails you 14 days before one expires, in case it doesn't.
Monitor this automaticallyWhat this check means
An SSL (TLS) certificate proves a site is who it claims to be and encrypts the connection. Browsers block a site whose certificate has expired, doesn't cover the name in the address bar, or doesn't link back to an authority they trust through its chain. Servers that still accept TLS 1.0 or 1.1 work today but fail modern security checks.
Frequently asked questions
What does "chain incomplete" mean?
The server sends its own certificate but not the intermediate one that links it to a trusted authority. Some browsers fetch the missing piece themselves; many apps and older phones don't, so they show an error.
How early should a certificate renew?
Let's Encrypt and most automated setups renew about 30 days before expiry. If yours is inside 30 days and hasn't renewed, check the renewal job before it lapses.
Why turn off TLS 1.0 and 1.1?
Both are retired: browsers dropped them in 2020, and security scans flag servers that still accept them. Keeping TLS 1.2 and 1.3 covers every current browser.