Type a domain name above and click Analyze to get started.
Free SSL checker, no signup. One click tells you whether a domain has working HTTPS, only plain HTTP, or no website at all. For the certificate’s issuer and expiry date, see How to check when an SSL certificate expires below.
Verify SSL Certificate Status for Any Domain
Enter a domain name above to check whether it answers over HTTPS with a certificate your browser trusts. The test runs from your own browser: it opens an HTTPS connection to the domain, and if that fails, tries plain HTTP to tell a broken certificate apart from a site that is offline.
Why SSL Certificates Matter
SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) encrypt the connection between a user’s browser and a website’s server. This encryption prevents attackers from intercepting sensitive data like passwords, credit card numbers, and personal information during transmission.
Since 2018, Google Chrome has marked all HTTP websites as “Not Secure” in the browser address bar. Google also confirmed that HTTPS is a ranking signal for search results. For any website that wants to maintain user trust and search visibility, a valid SSL certificate is no longer optional — it’s a baseline requirement.
Free SSL certificates from services like Let’s Encrypt have made encryption accessible to every website, regardless of budget. There is no longer a valid reason for a domain with an active website to lack HTTPS support.
What the Results Mean
A passing grade means the domain successfully completed an HTTPS handshake. The server presented a certificate, the connection was encrypted, and no critical errors occurred. This is the expected result for any properly configured website.
A failing grade indicates that the HTTPS connection could not be established. Common causes include an expired certificate, a self-signed certificate that browsers don’t trust, a misconfigured server, or a missing certificate entirely.
An unknown result means the domain didn’t respond on either HTTP or HTTPS. The domain may not have an active website, may be parked, or its servers may be temporarily offline.
Why HTTPS Fails: The Five Common Causes
When a domain responds on HTTP but not HTTPS, it is almost always one of these:
- Expired certificate. Let’s Encrypt certificates last 90 days by default, dropping to 64 days in February 2027 and 45 days in February 2028, and they rely on automatic renewal. When the renewal job breaks, the site fails within weeks.
- Name mismatch. The certificate covers
www.example.combut notexample.com, or the other way round. - No certificate on this host. The domain was pointed at a new server and nobody issued a certificate there.
- Self-signed or incomplete chain. The server sends a certificate browsers don’t trust, or leaves out the intermediate certificate.
- Port 443 closed. The server only listens on HTTP.
Our checker tells you HTTPS failed. It can’t tell you which of the five caused it, because browsers hide the reason from web pages. SSL Labs shows the exact error.
How to Check When an SSL Certificate Expires
Open this address, with your domain at the end: https://domainanalyzer.com/wp-json/dat/v1/domain/example.com. The ssl section returns the certificate’s expiry date, the days left, the issuer, and whether the certificate matches the domain name. It is free, needs no key, and returns JSON, so you can also ask an AI assistant to check it for you on a schedule.
Two dates are worth watching. The certificate expiry (days to weeks away if renewal fails) and the domain registration expiry, which our Domain Age Checker shows. A lapsed domain takes the website and the email down with it.
Beyond Basic SSL Checking
Our browser-based checker verifies that HTTPS works, which covers the most common need. For a comprehensive SSL audit that examines cipher suites, certificate chains, protocol support, and known vulnerabilities, we recommend supplementing with SSL Labs‘ detailed test.
To investigate the domain’s full technical posture, combine this SSL check with a DNS Lookup to verify server configuration, and a Domain Reputation Check that includes email authentication verification. If you’re evaluating a domain for purchase, the Domain Age Checker provides registration history context. Wondering whether you need to pay for a certificate at all? Read Free vs Paid SSL Certificates.
SSL Results From the Last 30 Days
Of 41 sites checked here in the last 30 days, 61% had a valid certificate.
From this site's own log of checks, 30 days, each domain counted once with its latest result. Updated 24 Oct 2026. Domains are never shown.
Frequently Asked Questions
How do I check if a domain has an SSL certificate?
Enter the domain at the top of this page. If it answers over HTTPS with a certificate your browser trusts, the result is valid. If only HTTP works, the certificate is missing or broken.
How do I check an SSL certificate’s expiry date?
Open https://domainanalyzer.com/wp-json/dat/v1/domain/ followed by the domain. The ssl section shows the expiry date, days left, issuer and whether the certificate matches the domain. For the full chain, use SSL Labs.
Why does a site work on HTTP but fail on HTTPS?
Usually an expired certificate, a certificate issued for a different name (www vs non-www), no certificate on a new server, a missing intermediate certificate, or port 443 closed.
Is a valid SSL certificate a sign that a site is safe?
No. It proves the connection is encrypted, not that the owner is honest. Free certificates are issued in minutes to anyone who controls the domain, scam sites included. Use the Domain Reputation Checker for more signals.
Is this SSL checker free?
Yes. No signup, no limits. The test runs in your browser, so it checks the site the same way a visitor’s browser would.