AdminForge Star on GitHub

TLS certificate checker

Server side

Check a certificate's expiry, names, issuer, key strength and negotiated protocol

Input

A URL is accepted too — only the host is used.

443 for HTTPS, 465 or 993 for mail, 636 for LDAPS.

Optional. Sends a different server name in the TLS handshake.

This tool runs on the AdminForge server, which needs to reach the target you enter. Nothing is stored or logged. Do not paste secrets into a server-side tool on an instance you do not control.

Fill in the form and run the tool. Results appear here.

The certificate is read from a real handshake, so what you see is what that server actually serves for the name you asked about — including the case where SNI selects a different certificate. Validation errors are reported rather than thrown, so an expired or self-signed certificate is still inspectable.