FREE · NO ACCOUNT · LIVE HANDSHAKE

Domain SSL Checker

Check the certificate a domain is actually serving: who issued it, when it expires, and whether the public endpoint verifies. It connects and reads the certificate presented, rather than trusting what a control panel says is installed.

Open Hostna

Free

Final price — Hostna is a small business under § 19 (1) UStG, so no VAT is added.

Runs on the domains screen of the desktop, free and without an account.

  • Issuer and expiry date
  • Whether the public endpoint verifies
  • Read live from the server, not from a panel
  • Free, with no sign-in
THE FAILURE NOBODY EXPECTS

A valid certificate, served incompletely

Certificates rarely fail by expiring — most people are warned about that. They fail when the chain is served without an intermediate, when only one of several hostnames is covered, or when a renewal wrote a new certificate that the web server never reloaded. All three look fine in a control panel and wrong to a browser.

  • An incomplete chain fails on some clients and not others
  • www and the bare domain need to both be covered
  • A renewed certificate still needs the server reloaded

The check reads the certificate served on the public HTTPS endpoint of the name you give it. It does not audit your cipher configuration, test every hostname on the certificate, or see anything behind a CDN or a firewall that terminates TLS before your server does.