SSL Expiry Check

Days left, issuer and trust status for every certificate in one table.

Free · up to 2,000 per run, auto-batched · Ctrl/⌘+Enter to run

FAQ

Which port is checked?

443 by default. To prevent abuse only 443 and a few common TLS ports are allowed, and you cannot choose a target IP.

What does "not trusted" mean?

An incomplete chain, name mismatch, self-signed or expired certificate. The exact reason is shown.

When should I renew?

Renew when fewer than 30 days are left. Domains hosted on 189DNS can get a free SSL certificate from the console.

Do you store my queries?

Only anonymous counters and a short cache. Share links expire after 24 hours.

Migrate to 189DNS in one click

Send the domains you just checked straight to the 189DNS console. Zones are created and existing records imported for you, no retyping.

Migrate to 189DNS

More free tools