SSL Certificate Checker
Use this free SSL checker, also called an SSL validator, to check any website SSL certificate. See when it expires, how many days are left, who issued it and which names it covers. Check up to 10 sites at once. Free, no sign-up.
How long SSL certificates last now
- Issued before 15 March 2026: up to 398 days.
- Issued from 15 March 2026: up to 200 days.
- Issued from 15 March 2027: up to 100 days.
- Issued from 15 March 2029: up to 47 days.
These limits come from the CA/Browser Forum Baseline Requirements. Shorter lifetimes mean manual renewals come round two to eight times a year, so automate with ACME where you can and keep a reminder for every certificate automation cannot reach.
How to check a website SSL certificate without a tool
- In a browser: open the site, click the icon to the left of the address, open the certificate details and read the "Expires on" or "Valid to" date.
- From a terminal: run openssl s_client -connect example.com:443 -servername example.com </dev/null | openssl x509 -noout -enddate and read the notAfter date.
Stop finding out about expired certificates from your customers
An expired SSL certificate puts a full-page browser warning in front of every visitor. ExpiryEdge gives every certificate, domain and IT subscription a named owner and reminders at 90, 60, 30 and 7 days by email, Slack, Teams or SMS.
Start freeMore free tools and guides
SSL certificate checker: frequently asked questions
Enter the website in the SSL checker above. It connects to the site, reads the certificate and shows the expiry date, the days left and the issuer. You can also click the padlock or site-information icon in your browser and open the certificate details.
An SSL checker shows the certificate’s start and expiry dates, the certificate authority that issued it, the names it covers (subject alternative names), whether browsers trust the chain, and the TLS version the site negotiated.
Browsers show a full-page security warning, many visitors leave, and API clients and integrations that validate certificates stop connecting. Nothing changes on the server, so the site looks fine to the team until someone reports it. Renew before the expiry date and set a reminder for each certificate.
A public TLS certificate issued on or after 15 March 2026 can be valid for at most 200 days. The limit drops to 100 days for certificates issued from 15 March 2027 and to 47 days from 15 March 2029, under the CA/Browser Forum Baseline Requirements.
Yes, the terms are used for the same thing. Both connect to a site and validate its certificate: the dates, the names it covers and whether the chain leads to a trusted certificate authority.
No. Each check opens one connection to read the public certificate and returns the result to your browser. Only public websites can be checked; internal and private addresses are refused.
