This tool has been used … times.
SSL Certificate Checker
Check a website’s live SSL/TLS certificate, expiration date, remaining days, issuer, and covered domains.
Enter a domain such as example.com, paste a full URL, or enter an internationalized domain name. The tool extracts the hostname and converts it to Punycode when needed.
Your five most recent domains are saved in this browser only. Clear the history on a shared device.
This tool connects to the target server and reads the certificate currently being served. The domain you enter is sent through NOVEBLO’s server to perform the check.
Related terms (Japanese pages)
Related checkers
How to use
Use a hostname such as example.com, a full URL such as https://example.com, or an internationalized domain name.
Select the button or press Enter to retrieve the certificate currently served by the domain.
Check its expiration date, days remaining, issuer, covered domains, and any warnings.
What it checks
- Whether the certificate is expired or approaching expiration
- How many days remain before expiration
- The certificate issuer and covered domains
- Whether the certificate matches the domain you entered, including wildcard names
- Self-signed certificates and certificates that browsers may not trust
- Your domain is sent through NOVEBLO’s server, which connects to the target server on port 443. The destination port is fixed; this tool does not fetch arbitrary URLs.
- Before connecting, the server checks the domain’s A and AAAA records. A domain is rejected if any address is private or reserved, and the TLS connection uses a checked public address.
- Only servers reachable from the public internet can be checked. Private certificates and servers on an internal network are not supported.
- A site without HTTPS or with port 443 closed cannot be checked.
- Results are cached for five minutes. After replacing a certificate, wait a few minutes before checking again.
- Up to 10 checks per minute are allowed per IP address. Repeated requests may be temporarily rate-limited.
- Certificate details are retrieved without rejecting an expired certificate, so expired certificates can still be displayed. Trust is checked separately when the server has a CA certificate bundle configured.