SSL / TLS check

SSL certificate checker

Check that your website's padlock is really protecting visitors: a valid certificate, modern encryption, and every visitor sent to the secure version of your site.

Free. About one minute. Safe to run on a live website.

What we test

Certificate validity: is it trusted by browsers, issued for your domain, and when does it expire?
Protocol versions: does the server still accept TLS 1.0 or TLS 1.1? Both were retired in 2021 and are rejected by modern browsers.
HTTPS redirect: is someone typing http:// sent to https:// automatically?
HSTS: does your site tell browsers to always use HTTPS, so a first visit on public Wi-Fi cannot be downgraded?
Certificate rules (CAA): have you limited which companies may issue certificates for your domain?

How to fix the most common problems

Certificate expired or about to expire

Most hosts and Cloudflare renew free certificates automatically. If yours expired, the automatic renewal has failed: ask your hosting company to check it, or reissue it from your hosting control panel (often under "SSL" or "Let's Encrypt").

TLS 1.0 or 1.1 still allowed

On Cloudflare: SSL/TLS → Edge Certificates → Minimum TLS Version → TLS 1.2. On other hosts, ask support to "disable TLS 1.0 and 1.1 and allow only TLS 1.2 and 1.3".

No redirect to HTTPS

On Cloudflare: SSL/TLS → Edge Certificates → Always Use HTTPS. On cPanel hosts, turn on "Force HTTPS Redirect" under Domains.

HSTS missing

Add this response header once HTTPS works everywhere on your site, including subdomains you use:

Strict-Transport-Security: max-age=31536000; includeSubDomains

Start HSTS with a short max-age (for example 300) if you are unsure, then raise it. Browsers remember HSTS, so a mistake can lock visitors out of a subdomain that has no HTTPS.

Common questions

Is a free SSL certificate as secure as a paid one?

For encryption, yes. Free certificates from Let's Encrypt or Cloudflare use the same encryption as paid ones. Paid certificates mainly add company identity checks and support.

Why does my site show "Not secure" even with a certificate?

Usually because the page loads some images or scripts over plain http (mixed content), or because visitors are not redirected from http to https.

How often should I check my SSL certificate?

Free certificates last 90 days or less and renew automatically. Checking monthly catches failed renewals before visitors see a warning.

Check your website now

Enter your domain. You get a score, every problem in plain language, and an action plan that says who should fix what.