TLS/Certificate Inspector

1. Enter a hostname, e.g. example.com, or hostname:port for a non-default port.
2. Certificate details appear automatically, or select “Inspect certificate” to run it immediately.
3. Copy the result to your clipboard.

Select “Use example” above to load a sample hostname, or try input like:

example.com:443

• The hostname is sent to our API only to fetch the certificate; it is never persisted or logged.
• Private, loopback, link-local, and other reserved IP ranges are blocked — see the FAQ.
• Requests are not included in analytics or error reporting.

• Reports the leaf certificate only.
• Each connection has a 5-second timeout.

Already have a certificate and don’t need a live connection? Try the Certificate Decoder. Checking response headers instead? Try the HTTP Header Inspector. Want expiry severity, chain validation, or a findings-based health check instead of a raw dump? Try the SSL/TLS Domain Checker.

• Understanding TLS certificate chains and why intermediates matterLeaf, intermediate, and root certificates explained — and why a missing intermediate breaks some clients but not others.