Check a site's certificate

See expiry, issuer, and fingerprint for any public domain.

More options
CDN or edge node

Useful when you want the cert from one IP, with the domain still sent as SNI.

How it connects
Domainexample.com
DNS
ServerResolved automatically
TLS
CertificateFrom the handshake
Type a domain above to get started.

Common questions

How does the lookup work?

We connect over TLS and read the public certificate from the handshake. No private keys are involved.

Is anything stored?

No. Results are returned for that request only.

When use a specific IP?

Behind a CDN or load balancer — the domain is still sent as SNI.