SSL Certificate Inspector

Inspect a public site’s TLS certificate, including issuer, SANs, fingerprints, and expiry details.

Quick samples

Inspect a public TLS endpoint

Enter a public hostname and optional port to inspect the leaf certificate currently served for that endpoint.

Public hostnames only. Do not include https://, paths, or IP addresses.

Leave blank to inspect the default HTTPS port.

Certificate summary

Review the endpoint, issuer, subject CN, and validity window first.

No certificate inspected yet

Run an inspection to see the leaf certificate details, SAN coverage, and expiry verdicts.

Documentation

SSL Certificate Inspector

Full Docs

About this tool

SSL Certificate Inspector checks the leaf TLS certificate currently served by a public hostname and port. Use it to review expiry, issuer, hostname coverage, and certificate identity details.

Input rules

Enter a public hostname and optional TLS port. Leave the port blank for 443.

Do not paste a full URL, path, query string, IP address, private hostname, or internal endpoint.

What it inspects

The tool reports the served leaf certificate, including subject, issuer, validity dates, SANs, self-signed signals, and SHA fingerprints.

It does not perform full certificate-chain analysis in v1.

tips_and_updates

Key use cases

  • -Check whether a certificate is expired or close to expiry.
  • -Confirm SAN coverage for a hostname.
  • -Investigate browser hostname mismatch errors.
  • -Compare issuer, subject, serial, and fingerprints during support or deployment work.

FAQ