SSL/TLS Certificate Checker
Open a live TLS connection to a domain and inspect its certificate, protocol and supported TLS versions.
Result for ketsarali.netlify.app
Valid
- Issuer
- DigiCert Inc
- Subject (CN)
- *.netlify.app
- Valid from
- 2026-02-16
- Valid to
- 2027-03-19 (198 days)
- Negotiated protocol
- TLSv1.3
- Cipher
- TLS_AES_128_GCM_SHA256
TLSv1.3
TLSv1.2
*.netlify.app, netlify.app
FAQ
Why does it show data even for invalid certificates?
We report the presented certificate regardless of trust so you can diagnose mismatched or self-signed certs.
What are "weak TLS versions"?
TLS 1.0 and 1.1 are deprecated. If the server still accepts them, disable them in your server config.
How soon should I renew?
Renew well before expiry; automated issuers like Let's Encrypt renew ~30 days out.
About SSL/TLS checks
This tool opens a direct TLS connection to the domain on port 443 and reads the certificate the server presents. Nothing is sent to a third party - the check runs entirely on our infrastructure.
- A trusted, unexpired certificate avoids browser warnings and SEO penalties.
- Keep only TLS 1.2 and 1.3 enabled.
- Make sure the certificate's SAN list covers every hostname you serve.