SSL Certificate Checker
Verify any domain's SSL/TLS certificate in seconds. Check validity, expiry, issuer, protocol version, and cipher strength.
About this check
What is an SSL certificate?
An SSL (Secure Sockets Layer) certificate encrypts data between your visitors' browsers and your server. Without it, passwords, credit cards, and personal data travel in plain text. Modern browsers mark HTTP-only sites as "Not Secure".
Why does the grade matter?
The SSL grade reflects your certificate's strength, chain validity, protocol support, and cipher configuration. An A+ means modern TLS 1.3, strong ciphers, OCSP stapling, and a trusted root. A C or lower means your visitors may be vulnerable to known attacks like POODLE or BEAST.
How often should I check?
At minimum: every time you renew or change your certificate. Better: continuously. A free cqwerty account can monitor your saved domains weekly and email you when your grade changes or your certificate is approaching expiry.
What is TLS vs SSL?
TLS (Transport Layer Security) is the modern successor to SSL. "SSL certificate" is the common name, but your server should be running TLS 1.2 or TLS 1.3. TLS 1.0 and SSL 3.0 are deprecated and vulnerable, our checker flags them.
FAQ
Operator questions, answered.
Is this SSL checker free?+
Yes, completely free. No signup, no credit card. You can check any public domain's SSL certificate instantly.
What does an A+ SSL grade mean?+
A+ means your domain has a valid certificate from a trusted CA, uses TLS 1.2 or 1.3, employs strong cipher suites, has HSTS enabled, and supports OCSP stapling. It's the gold standard.
My SSL grade is low, what should I do?+
Common fixes: disable TLS 1.0/1.1, remove weak ciphers (RC4, 3DES), enable HSTS, and ensure your certificate chain is complete. Run a full cqwerty scan for copy-paste fix instructions.
How is this different from SSL Labs?+
SSL Labs is excellent for deep TLS analysis. cqwerty checks SSL as one surface of a six-surface scan: we also check DMARC / SPF / DKIM, HTTP headers, DNS, WHOIS, exposed files and spam blocklists, with a plain-English fix for every finding. The full check list is on our methodology page.
SSL Certificate Checker is one slice of the full scan.
A free cqwerty scan covers TLS, DMARC / SPF / DKIM, DNS, headers, WHOIS, exposed files and spam blocklists in a single 90 second submission.