All checks

SSL Certificate

Certificate issuer, validity dates and the chain of trust

What it is

An SSL certificate proves a server is who it claims to be, and is what lets a site serve HTTPS. Certificates are issued by Certificate Authorities, who are meant to verify the holder's identity before signing one. The chain shows every certificate from the site's own up to a root the browser already trusts.

Why it matters

A certificate is public by design, so it doubles as a record: who issued it, when it expires, which organisation it was issued to, and often a list of other hostnames covered by the same cert. That last part regularly turns up subdomains and sister sites nobody advertised.

Key terms

Certificate Authority (CA)
An organisation such as Let's Encrypt that browsers trust to issue certificates. It checks who controls a domain before issuing one.
Certificate Trust
Whether the certificate is valid for this hostname and was issued by an authority browsers trust.
Certificate Expiry
Certificates are only valid until their expiry date, after which browsers refuse them.
Subject Alternative Names (SANs)
The hostnames a certificate covers. Browsers show a warning if the site's name isn't one of them.
Certificate Fingerprint
A hash of the whole certificate. If two fingerprints match, it's the same certificate.

Related checks