SSL checker — is your certificate installed right?
Enter a website to check its SSL certificate: whether browsers trust it, which names it covers, when it expires, whether the chain is complete, and which TLS version and cipher the server uses. Free, no sign-up.
What the SSL checker looks at
A padlock in your own browser only proves the site works for you, today, on that device. The checker opens a fresh connection and reports each thing that can go wrong for other visitors.
Trust
Is the certificate signed by a certificate authority browsers know, through a complete chain? Self-signed and missing-intermediate setups fail here.
Name match
Does the certificate list the exact name you typed? A certificate for yourbrand.in does not cover www.yourbrand.in unless it says so.
Expiry
Start and end dates and days left. Free certificates last 90 days or less and must renew themselves; an expired one blocks the whole site.
TLS and key
The TLS version and cipher the server picked, plus the key type and size. TLS 1.2 or 1.3 with RSA 2048+ or ECDSA is what you want.
Fixing the common SSL errors
Expired: renew the certificate in your hosting panel or with your SSL provider, then reload the web server. On HostKarle, renewal is automatic as long as the domain still points at our servers.
Name mismatch: issue a certificate that includes every name visitors use, at least the bare domain and www. Also check the domain's A record points to the server that holds the certificate, not an old host.
Chain incomplete: paste the CA bundle (intermediate certificate) into the "CA certificate" box in your panel next to the certificate itself.
Self-signed: fine for testing, never for a public site. Replace it with a free Let's Encrypt certificate.
Frequently asked questions
Certificate still not working? Message us on WhatsApp at +91 94343 44325, or open a ticket from your client area.
How do I check if my SSL certificate is installed correctly?
Type your website address above, for example www.yourbrand.in. The checker connects to your server the way a browser does and reports whether the certificate is trusted, whether it covers that exact name, when it expires, and whether the full chain (the intermediate certificate) is installed. Check both the bare domain and the www name, because they are separate names on the certificate.
What is a TLS checker?
SSL is the old name for TLS, the encryption behind https. A TLS checker shows which TLS version and cipher the server agreed to use. TLS 1.3 and 1.2 are current; TLS 1.0 and 1.1 are switched off in every modern browser, so a server that only offers them looks broken to visitors.
Why does my browser say "Not secure" when the certificate is valid?
Usually because the page loads some images, scripts or fonts over plain http (mixed content), or because the certificate covers yourbrand.in but you opened www.yourbrand.in (or the other way round). Run the checker on the exact address in your browser bar. If the certificate is fine, fix the http links in your site settings; in WordPress, set both addresses under Settings → General to https.
What does "certificate chain incomplete" mean?
Browsers trust your certificate because a known certificate authority signed it, usually through an intermediate certificate. If the server sends only your certificate without the intermediate, some browsers and most apps (Android, payment gateways, curl) refuse the connection. Install the CA bundle your SSL provider gave you alongside the certificate.
Does HostKarle give a free SSL certificate?
Yes, on every hosting plan. A Let's Encrypt certificate is issued automatically for each domain on the account, usually within 20 to 30 minutes of the domain pointing at our servers, and it renews itself every 60 to 90 days. If this checker shows a problem on a HostKarle site, check the domain points to ns1.fastnsdns.com and ns2.fastnsdns.com with the DNS lookup, then message us.
Can I check a mail server or a control panel port?
Yes. Add the port after the name, for example mail.yourbrand.in:993 for IMAP, :465 for SMTP or :2222 for DirectAdmin. The checker allows the common TLS ports (443, 8443, 2222, 2083, 2087, 2096, 465, 993, 995, 636, 853, 5986). Ports that start in plain text and upgrade later (STARTTLS on 25 or 587) are not supported.
Is the SSL checker free?
Yes, with no sign-up. To stop abuse, each visitor can run about 20 checks in any 10 minutes, and the checker only connects to public servers, never to private or local addresses.
Free SSL on every HostKarle plan, renewed for you.
Hosting from ₹99 a month with DirectAdmin, business email and free migration. The price you sign up at is the price you renew at.