PageKiwi Tool
SSL certificate checker
Updated Oct 18, 2026
See whether a website's SSL certificate (what gives you the padlock) is valid, when it expires, and what to do if it isn't.
Try it on pagekiwi.com or our test town.
Read from our server in the Netherlands just now, from the address the name leads to. Automated checks sometimes miss a problem or flag something that's fine. Think this one's wrong? Tell us and we'll look into it.
Send this to your web person
Not sure what to say? Copy this into an email and send it.
Common questions
Is my SSL certificate valid?
Type your address above. It's valid when browsers trust it, it hasn't run out, and it covers the exact name people type. Each of those is a row in the results, with what to do if it fails. What is an SSL certificate (and do I need one)? explains the padlock from the start.
How long does an SSL certificate last?
Not long, and getting shorter. Certificates issued since March 15, 2026 last 200 days at most, falling to 100 days in March 2027 and 47 days in March 2029. Free ones from Let's Encrypt last 90 days. So what matters is that yours renews by itself, which most web hosts and website builders do for you.
Why is my SSL certificate not working?
- It has expired. Its automatic renewal failed, often after a domain or hosting change.
- It's for another name. It covers www.YourWebsite.com but not YourWebsite.com, or the other way round.
- It's self-signed, or from a company browsers don't trust. Browsers have no way to check who made it.
- The chain is incomplete. The server leaves out the in-between certificate, so some phones and apps warn while your computer looks fine.
Visitors then see "Your connection is not private". If the site has no certificate at all, browsers say "Not secure" instead.
What happens when an SSL certificate expires?
Browsers stop people at a full-page warning instead of your site, and many turn back. Your host or website builder renews it, usually for free, and the new one works as soon as it's installed.
How to use it
- Type the website's address, like YourWebsite.com. Check the version people use too: www.YourWebsite.com can have its own certificate.
- Press Check the certificate. It takes a few seconds.
- Read down the rows. Anything with a cross needs fixing; the date tells you when it runs out.
- If anything needs fixing, copy the message at the bottom to whoever looks after your site.
What your results mean
- Padlock
- Whether browsers trust the certificate. If not, the reason: expired, the wrong name, self-signed, a missing in-between certificate, or a company browsers don't trust.
- Covers
- Whether the certificate is for the exact name you typed, and the other names it covers.
- Runs out
- The date it expires and the days left. We flag it 14 days before.
- Issued by
- The company that signed it (a certificate authority). Free and paid certificates give the same padlock.
When to use it
- Visitors say your site shows "Your connection is not private", or a padlock warning.
- After you move hosts, change your domain or add www, which is when certificates most often go wrong.
- Your browser shows "Not secure" next to your address.
Why it matters
- An expired or wrong certificate puts a full-page warning in front of your site, and many people turn back.
- Certificates now last 200 days at most, so one that doesn't renew by itself will catch you out.
Go deeper: "Your connection is not private". A warning instead of the page: the site's padlock certificate has expired or is wrong.