SSL/TLS Certificate Checker
Open a live TLS connection to a domain and inspect its certificate, protocol and supported TLS versions.
Result for hansenjewelry.com
Valid
- Issuer
- GoDaddy.com
- Subject (CN)
- hansenjewelry.com
- Valid from
- 2026-07-16
- Valid to
- 2027-01-30 (149 days)
- Negotiated protocol
- TLSv1.3
- Cipher
- TLS_AES_128_GCM_SHA256
TLSv1.2
hansenjewelry.com
FAQ
Why does it show data even for invalid certificates?
We report the presented certificate regardless of trust so you can diagnose mismatched or self-signed certs.
What are "weak TLS versions"?
TLS 1.0 and 1.1 are deprecated. If the server still accepts them, disable them in your server config.
How soon should I renew?
Renew well before expiry; automated issuers like Let's Encrypt renew ~30 days out.
About SSL/TLS checks
This tool opens a direct TLS connection to the domain on port 443 and reads the certificate the server presents. Nothing is sent to a third party - the check runs entirely on our infrastructure.
- A trusted, unexpired certificate avoids browser warnings and SEO penalties.
- Keep only TLS 1.2 and 1.3 enabled.
- Make sure the certificate's SAN list covers every hostname you serve.