Free SSL certificate expiry checker

Enter a hostname to see the certificate it actually serves: expiry date, issuer and covered names.

The RenewRoster app isn’t live yet, so this free tool is switched off for now. To join the beta, email [email protected].

How to read the result

• Expires (notAfter): the certificate stops being trusted after this moment.
• Issuer: the certificate authority, e.g. Let's Encrypt, Sectigo or DigiCert.
• Names (SANs): the hostnames the certificate covers. A wildcard like *.example.com covers one level of subdomains.
• Trusted: whether the chain validates against public roots. A self-signed or incomplete chain shows a warning.

Check it yourself

From a terminal: openssl s_client -connect example.com:443 -servername example.com </dev/null | openssl x509 -noout -enddate -issuer. In a browser, click the padlock and open the certificate details.

Why one-off checks aren't enough

Certificate lifetimes are dropping to 47 days by 2029. Agencies with dozens of client sites need tracking that runs every day, plus reminders before anything lapses.