SSL and HTTPS Checker
Enter your domain. We check the certificate and whether visitors are actually kept on the secure version.
Free, no sign-up, no email needed for this check.
A valid certificate is only half of it
Most sites have HTTPS working. Fewer tell the browser to insist on it. Without that instruction, the first request of the day can still go out unencrypted before the redirect happens.
Where that actually bites
On open networks. A cafe, a hotel, an airport. That first unencrypted request is the opening someone needs to serve a different version of your site to your visitor.
What expiry really costs
An expired certificate does not degrade quietly. Every browser throws a full-page red warning, and most visitors leave. Certificates renew automatically almost everywhere now, which is exactly why nobody notices when the automation stops working.
Common questions
How long should a certificate be valid?
Public certificates are capped at just over a year, and most automated ones renew every 90 days. What matters is that the renewal runs, not the length.
What is HSTS?
A header that tells the browser to only ever load your site over HTTPS, including the very first request on the next visit.
Is a free certificate worse than a paid one?
For encryption, no. A free Let's Encrypt certificate and a paid one protect the connection identically.