SSL/TLS & CERTIFICATE EXPIRY CHECKER
Inspect the certificate and negotiated TLS details presented by a public hostname on TCP port 443.
Certificate result
Enter a public hostname to run the check.
What this check does
The server resolves the hostname, rejects any non-public address, then connects directly to one validated address while retaining the hostname for SNI and certificate matching. The destination is always TCP port 443.
Trust reflects this server’s current certificate trust store. Results can differ by client, network path, certificate-store version or load-balanced endpoint.
Point-in-time diagnostic only. Validate certificate deployment, renewal automation and client compatibility independently before production decisions.