TLS/SSL Certificate Checker
Connect to a host and port to inspect its TLS/SSL certificate — expiry, trust status, full chain, protocol, and cipher suite.
Input
Protected by Cloudflare Turnstile
Output
| # | Subject alternative names |
|---|---|
| No data available | |
| # | Subject (Common Name) | Issuer (Common Name) | Valid to | Status |
|---|---|---|---|---|
| No data available | ||||
Readme
What is a TLS/SSL certificate check?
Every HTTPS website presents a TLS (formerly SSL) certificate to prove its identity and encrypt traffic. That certificate has an expiration date, a chain of issuing authorities, and must be signed by a certificate authority your browser trusts - if any of that is wrong, visitors see security warnings.
Tool Description
The TLS/SSL Certificate Checker connects directly to a remote host and port from our server and performs a real TLS handshake, then reports back what certificate the server presented - without exposing your own IP address or requiring any local tools.
Features
- Server-Side Handshake: Our server connects to the target host and port, so nothing runs in your browser or reveals your IP
- Expiry Tracking: Shows validity dates and days remaining, and flags expired or soon-to-expire certificates
- Trust Status: Reports whether the certificate chain is trusted and, if not, why
- Full Chain: Lists every certificate in the chain, from the leaf up to the root, including self-signed roots
- Connection Details: Surfaces the negotiated TLS protocol version and cipher suite
- Safe by Design: Only public hostnames and IP addresses can be checked - requests to private, loopback, and internal network ranges are rejected
Comments
MCP
Use it with AI assistants
AI assistants connected to the MCP server can run this tool as tls_certificate_checker.