Vanorika Technologies

Free tool

SSL Certificate Checker

See when a certificate expires, who issued it, and what it covers. All before it lapses.

Read-only and passive. We only query public records: no login, no port scanning, no exploitation.

What this checks

  • Opens a TLS connection to your domain on port 443 and reads the certificate the server presents.
  • Reports the issuer, the name the certificate was issued to, and its valid from and valid to dates.
  • Counts the days remaining until expiry.
  • Lists up to twelve names the certificate covers (its Subject Alternative Names) and whether the chain is trusted and in date.

Why it matters

When a certificate expires, browsers show a full page warning and most visitors leave, which can stop online enquiries, bookings or fee payments until someone notices. Free certificates from Let's Encrypt last 90 days, so a broken renewal job can take a site down within weeks. Checking the expiry and covered names ahead of time turns an outage into a routine task.

How to read the result

  • Valid means the server's certificate chained to a trusted authority and has not expired. Invalid with days still remaining usually points to a missing intermediate certificate or a name mismatch.
  • Compare the covered names with the address you use. A certificate for example.co.zw alone will warn visitors who type www.example.co.zw.
  • Fewer than 30 days remaining on a certificate that should auto renew is a sign the renewal is failing. Fewer than 7 days needs action today.
  • The issuer tells you who to go to for renewal: Let's Encrypt or cPanel AutoSSL renew automatically, while paid certificates need a manual reissue.

How to fix what it finds

  • Check that your renewal task (Certbot, AutoSSL or your host's equivalent) is running and that its last run succeeded.
  • Reissue the certificate to include every name you serve, typically both the bare domain and www.
  • Install the full chain file supplied by the issuer, not just the server certificate, so all devices trust it.
  • Put the expiry date in a shared calendar with a reminder 30 days ahead, so renewal does not depend on one person remembering.

Want it fixed for you, or tested properly? See what a test would cost or book a free 30 minute call.

Questions people ask

How do I check when my SSL certificate expires?

Enter your domain above and the tool reads the certificate directly from your server, then shows the expiry date and days remaining. You can also click the padlock in your browser and view the certificate details.

Why does my site say Not Secure when I have a certificate?

The certificate may have expired, may not cover the exact name you visited, or the page may load images or scripts over plain HTTP. The covered names list above will show a name mismatch immediately.

Is a free Let's Encrypt certificate as secure as a paid one?

For encrypting traffic, yes: both use the same standards. Paid certificates can add organisation validation or a warranty, but the encryption itself is not stronger.

Guides for what it finds

Related free tools