>_ Tools / SSL Certificate Checker
SSL Certificate Checker
Enter a domain to see when its SSL certificate expires, who issued it, whether the chain is trusted and which TLS version it uses.
FreeNo sign-up
>_ What it checks
>_ Guide
What this checker looks at
- Expiry date. An expired certificate shows a big red browser warning and most visitors leave.
- Chain of trust. The server must send its intermediate certificates. Without them some phones and apps fail to connect even if the site looks fine on your laptop.
- Hostname match. The certificate must list the domain being visited, directly or through a wildcard like
*.example.com.my. - TLS version and cipher. TLS 1.3 is best. TLS 1.0 and 1.1 are retired.
Certificate lifetimes are getting shorter
The CA/Browser Forum approved a phased cut in maximum SSL certificate lifetime: 200 days from March 2026, 100 days in 2027 and 47 days by 2029. Let's Encrypt certificates are usually valid for 90 days. Manual yearly renewal no longer works. Use automatic renewal (ACME, for example Certbot or cPanel AutoSSL) and monitor expiry dates.
Common SSL problems and fixes
| Problem | Usual cause | Fix |
|---|---|---|
| Untrusted chain | Intermediate certificate not installed | Install the "fullchain" file or CA bundle from your certificate provider. |
| Name mismatch | Certificate covers only www, or another site on shared hosting | Reissue the certificate with both names, with and without www. |
| Expired | Automatic renewal failed | Check the Certbot or AutoSSL logs, and make sure DNS and port 80 are reachable for validation. |
| TLS 1.0/1.1 still on | Old server configuration | Limit to TLS 1.2 and 1.3 in nginx, Apache or the load balancer. |
A padlock does not mean a site is safe
The padlock only means the connection is encrypted. Phishing sites get free SSL certificates in minutes too. To check whether a link is a scam, use the Scam Link Checker.
>_ FAQ
Frequently asked questions
How do I check when an SSL certificate expires?
Enter the domain above and press Check SSL. The result shows the expiry date and days remaining. You can also click the padlock in your browser address bar to view certificate details.
Why does my site work on a computer but show an error on phones?
Usually the intermediate certificate is missing. Desktop browsers sometimes fetch it themselves, but phones and other apps do not. Install the full certificate chain on the server.
Is a free certificate like Let's Encrypt good enough for a company?
For encryption, yes. Free and paid certificates provide the same encryption. Paid certificates usually add support, warranty or organisation validation (OV/EV).
Can this tool check internal servers or IP addresses?
No. For security it only checks public domain names. For internal systems, run openssl s_client from inside your own network.
>_ Mission control
SSL is only the start.
RC.MY web application penetration tests cover TLS setup, authentication, access control and the OWASP Top 10.
>_ Tools
More free tools
Every tool is free, needs no sign-up, and is built by the RC.MY penetration testing team.
Also on RC.MY Surah Al-Mulk · Surah Yasin · Surah Al-Waqiah · Surah Al-Fatihah · Surah Al-Kahf · Surah Ar-Rahman · Ayat Kursi · Ayat 1000 Dinar · Doa harian