What this SSL check shows
- Trusted or not: whether a browser would accept the certificate, and the exact reason if not — expired, wrong name, self-signed, or a missing intermediate certificate.
- Names covered: every domain the certificate is valid for, including wildcards such as *.example.com.
- Dates: when it was issued and how many days are left. Free certificates such as Let’s Encrypt last 90 days and must renew automatically.
- Chain and connection: the intermediate certificates the server sends, the TLS version (1.2 or 1.3) and the cipher.
Fixing common problems
- Expired: renew the certificate. On cPanel or hPanel, AutoSSL or the SSL page usually renews it with one click.
- Name mismatch: the certificate does not cover this address — often www versus no www. Reissue it to include both.
- Missing intermediate: install the full chain (the “CA bundle” file) along with your certificate.
- Old TLS: TLS 1.0 and 1.1 are switched off in browsers; make sure the server offers TLS 1.2 or 1.3.
Frequently asked questions
How do I check when my SSL certificate expires?
Enter your domain above. “Valid until” shows the date and how many days are left.
Why does my site show “Not secure” when I have SSL?
Usually because the page loads some images or scripts over http (mixed content), the certificate does not cover that exact address, or it has expired.
Is a free SSL certificate as secure as a paid one?
The encryption is the same. Paid certificates can add organisation validation and warranty, but browsers show the same padlock.