SSL certificate checker
Enter a website address and KeenCrow connects to it the way a browser does, then tells you whether its security certificate is valid, who issued it and how many days are left before it expires. Free, with no account.
What the check tells you
- Valid or not. Whether a browser would accept the certificate: trusted issuer, not expired, and made out for that exact address.
- The expiry date. The day the certificate stops working, and how many days are left.
- The issuer. Who signed it, for example Let's Encrypt or your hosting company.
- The rest of the site. The same check also confirms the name lookup works, the page answers and when the domain registration runs out.
Common problems and what they mean
- Certificate expired. Visitors see a full-page warning and most leave. Automatic renewal usually stopped working: a changed DNS record, a firewall blocking the renewal check, or a renewal job that no longer runs.
- Certificate does not match the domain. The certificate was made for another name, often the address without www or the hosting company's own name. Add the missing name to the certificate.
- Certificate is not valid. Usually a self-signed certificate or a missing intermediate certificate. The site works in some browsers and fails in others.
Never be surprised by an expired certificate
KeenCrow can check the certificate every few minutes and email you 7, 3 and 1 days before it expires, and again the moment it stops working. One website is free with no card; Starter checks 3 every minute for $2 a month.