SSL checker: make sure visitors never see a certificate warning
This SSL checker tests your certificate, its chain and expiry date, which TLS versions your server accepts, and whether every page and file loads over HTTPS.
- Free, no account
- Results in under a minute
- Any public HTTPS site
Example result:example-shop.hr
WordPress 6.8Sample shop · homepage · mobile Chrome · the same check you get for your own site
What we found
Show 1 passed check
Fix these first
From the example above. Check your own site to get the fixes that apply to it.
Problem: The site is served over HTTP, not HTTPS
Browsers label HTTP pages "Not secure" and Google ranks HTTPS pages higher.
How to fix it: Get a certificate (Let's Encrypt is free) and enable HTTPS on your host.
What the SSL certificate checker tests
Eight checks on your certificate, protocols and HTTPS setup, each with the fix.
HTTPS connection
Checks the site is served over HTTPS, so browsers don't label it "Not secure" and visits stay private.
HTTP to HTTPS redirect
Checks that old http:// links and typed addresses land on the encrypted https:// page.
HSTS header
Checks the header that keeps return visits on HTTPS, so they never start on interceptable plain HTTP.
HSTS preload readiness
Checks your HSTS header qualifies for the browsers' built-in HTTPS-only list.
Minimum TLS version
Checks the server refuses old TLS 1.0 and 1.1, which attackers can use to weaken a connection.
Certificate expiry
Shows how many days your TLS certificate has left, before browsers show a full-page warning.
Certificate chain
Checks browsers can verify who issued your certificate, so visitors don't see a privacy warning.
Mixed content
Finds files loaded over http:// on an HTTPS page, which browsers block or mark as not secure.
Show 4 more checks
Minimum TLS version
Checks the server refuses old TLS 1.0 and 1.1, which attackers can use to weaken a connection.
Certificate expiry
Shows how many days your TLS certificate has left, before browsers show a full-page warning.
Certificate chain
Checks browsers can verify who issued your certificate, so visitors don't see a privacy warning.
Mixed content
Finds files loaded over http:// on an HTTPS page, which browsers block or mark as not secure.
How the SSL checker works
Check HTTPS
We check that the site is served over HTTPS and that http:// addresses redirect to it, and whether HSTS is set.
Run a TLS handshake
A TLS handshake against the host checks the certificate chain, the days left before expiry, and whether TLS 1.0 or 1.1 are still accepted.
Look for mixed content
The page is checked for any image, script or other resource that still loads over plain HTTP.
This is a practical check of certificate, chain, expiry and protocol versions, not a full cipher-suite audit like SSL Labs.
SSL certificate and TLS questions
How do I check if an SSL certificate is valid?
Enter your domain above. The checker runs a TLS handshake and checks that the certificate is trusted, matches the host name, has a complete chain and has not expired, with the days left. It also tests whether TLS 1.0 or 1.1 are still accepted and whether any file loads over plain HTTP. In a browser, click the icon to the left of the address.
Why does my site say "Not secure" with a valid certificate?
Usually because the page loads something over plain http, such as an image, script or form target, which is called mixed content, or because visitors reach the http:// address without being redirected. The checker lists every resource loaded over HTTP and tests the http-to-https redirect, so you can see which it is and fix the address.
What is SSL, and how is it different from TLS?
SSL stands for Secure Sockets Layer, the original protocol for encrypting web traffic. TLS (Transport Layer Security) replaced it in 1999, and every SSL version is now disabled in browsers, but the old name stuck, so an SSL certificate today is a TLS certificate. Servers should accept only TLS 1.2 and 1.3; this checker flags a server that still accepts TLS 1.0 or 1.1.
How do I fix NET::ERR_CERT_DATE_INVALID?
It means the certificate has expired or, less often, that the visitor's computer clock is wrong. If the checker shows the certificate has expired, renew and install it, then set up automatic renewal so it does not happen again. If the certificate is valid here but one visitor sees the error, the date on their device is the likely cause.
How do I check an SSL certificate's expiration date?
Enter the site above: the checker reads the certificate during the handshake and shows how many days it has left. In a browser you can also click the icon next to the address and open the certificate details. Automatic renewals fail silently more often than you would expect, so check after any server or DNS change. Email alerts 14 days before expiry are part of monitoring, a funded unlock.
Is this a full TLS audit?
No. It is a practical check of the certificate, chain, expiry, protocol versions, HTTPS redirects, HSTS and mixed content, which are the things that cause browser warnings. It does not grade every cipher suite or test for specific protocol attacks. For most sites the practical checks catch what actually breaks; a full cipher audit matters mainly for compliance scans.
Is this SSL checker free?
Yes, with no sign-up. getReport is funded by donations, not plans, and the complete report with all seven modules is one click away, also free. It stays at its shareable link for 12 months, is not listed publicly and carries a noindex tag, and nothing about your visitors is collected.
Related free tools
All 59 tools →Free, funded by the people who use it
No account, no paid plan. Donations keep it running.