Defendoria
Talk to an ExpertRequest a Security Review

Digital illustration of secure website infrastructure

DEFENDORIA SECURITY TOOLS

SSL Certificate & TLS Diagnostics

See how your website’s SSL certificate is configured. Verify trust, certificate validity, hostname coverage, key details and available TLS versions from a real connection.

Check a certificate How this works
Verified TLS connectionCertificate expiryPractical guidance

FREE CERTIFICATE LOOKUP

Check your SSL certificate

HTTPS / Port 443 only

Enter one hostname without a path or port. No login, file access, crawling or security exploitation.

WE CHECKCertificate trustExpiryHostname coverageTLS 1.2 / 1.3

THE CHECKER’S SCOPE

Real certificate evidence, not a fabricated security grade.

The tool opens a TLS connection to a public IP for the domain, with peer and hostname validation enabled. If validation fails, it may perform a separate unverified handshake solely to inspect the certificate; such metadata is always marked untrusted.

It then tests TLS 1.2 and 1.3 negotiation without certificate validation, so protocol support can be considered independently. It does not issue HTTP requests or scan application vulnerabilities.

Frequently asked questions

Can my site have HTTPS and still be insecure?

Yes. HTTPS protects a network connection, but doesn’t guarantee that WordPress plugins, server files, credentials or application logic are secure.

How accurate is the expiry date?

It’s read from the certificate presented during a TLS handshake to one publicly resolved IP. A different CDN or hosting endpoint may serve a different certificate.

Does this checker fix expired certificates?

No. It explains the problem and suggests next steps, such as renewing the certificate and ensuring your web server presents it.

Does an unsuccessful TLS 1.3 probe mean it’s unsupported?

Not necessarily. It means TLS 1.3 could not be confirmed from this client and endpoint. Hosting restrictions or client compatibility may also be responsible.

Does it test every page or port on my website?

No. It performs TLS handshakes to one public IPv4 endpoint on port 443 only, without following redirects or requesting web pages.

Methodology: MDN: TLS · OWASP TLS Cheat Sheet · Let’s Encrypt documentation.