When does your SSL certificate expire?

An expired certificate takes a site down with a full-page browser warning — and it happens to companies of every size. Check the expiry date, the issuer, and every certificate publicly issued for a domain.

Reads public Certificate Transparency logs via crt.sh · nothing is sent to us or stored

What this can and cannot tell you

This reads Certificate Transparency logs — the public, append-only record of every certificate issued by a trusted authority. It reliably answers when your newest certificate expires, who issued it, and whether anything unexpected has been issued for your domain.

It cannot inspect the certificate your server is currently presenting, nor the cipher suites or protocol versions it negotiates — a browser cannot open a raw TLS connection to another host. A full handshake audit needs a server-side scan, which we run as part of a security assessment.

More security tools

Check something else

All 24 tools

Found something you’d rather not fix yourself?

Configuring DNS, TLS and email authentication properly — without breaking live traffic — is part of our cybersecurity and managed services work.

Talk to an engineer