What this tool can and cannot do
Checks port 443 only, from our server. It verifies trust using our server's certificate store, which matches what major browsers trust in almost all cases.
Data sources: Direct TLS connection from our server
Understanding the results
Renew certificates before they expire – most free certificates last 90 days or less and should renew automatically. "Name mismatch" means the certificate does not cover the domain you entered.
Troubleshooting
- Untrusted chain: install the intermediate certificate bundle provided by your certificate authority.
- Expired: check that automatic renewal (e.g. Let's Encrypt / hosting AutoSSL) is working.
Frequently asked questions
What is a SAN?
Subject Alternative Names are the list of domain names a certificate is valid for, e.g. example.com and www.example.com.