SSL Certificate Checker

About SSL certificate checking

This tool connects to the host on port 443, performs the TLS handshake, and reads the certificate the server presents — exactly what your visitor's browser does. It doesn't validate against your local trust store, so it works equally for sites with self-signed certs (useful when debugging staging servers).

Why check your SSL certificate?

• Expiry monitoring. Modern certs typically last 90 days (Let's Encrypt) to 1 year. An expired certificate triggers a full-screen browser warning that destroys conversions.
• SAN coverage. The certificate's Subject Alternative Names must list every hostname you use — example.co.ke, www.example.co.ke, mail.example.co.ke, etc.
• Signature algorithm. Modern certs use sha256WithRSAEncryption or ECDSA. Anything older is rejected by current browsers.
• Issuer trust. Make sure the cert is from a recognised CA (Let's Encrypt, Sectigo, DigiCert, Google Trust Services). Unknown issuers raise security warnings.

Need a free SSL certificate?

Every Hostiko hosting plan includes free auto-renewing Let's Encrypt SSL. Read the free SSL guide for the full picture.