Free SSL Certificate Checker
Check your SSL certificate installation in seconds. Verify TLS version, expiry, chain, and key strength with an A-F grade.
Analyzing SSL certificate...
Connecting securely and evaluating 8 certificate checks.
8 Checks We Run
A complete SSL/TLS health check covering everything from certificate validity to cipher strength.
Certificate Validity
Verifies the certificate is currently valid and has not expired or been issued for a future date.
Certificate Expiry
Checks how many days remain until expiry. Warns at 30 days and flags critical at 14 days.
Hostname Match
Confirms the certificate covers your domain, including wildcard and Subject Alternative Name (SAN) matching.
TLS Version
Verifies the server uses TLS 1.2 or 1.3. Flags deprecated TLS 1.0 and 1.1 as insecure.
Certificate Chain
Checks that intermediate certificates are served, ensuring compatibility with all browsers and devices.
Certificate Authority
Detects self-signed certificates that browsers will not trust, causing security warnings for visitors.
Key Strength
Verifies the public key meets minimum strength requirements: 2048-bit RSA or 256-bit ECDSA.
Signature Algorithm
Confirms the certificate uses SHA-256 or stronger. Flags deprecated SHA-1 signatures.
Why SSL Matters for Laravel Applications
SSL/TLS is the foundation of your Laravel application's security. Without a properly configured certificate, session cookies, CSRF tokens, API keys, and user data travel in plain text across the network.
Session Security
Laravel's SESSION_SECURE_COOKIE flag only works over HTTPS. Without SSL, session cookies can be intercepted on any network hop between user and server.
HSTS Requirement
The Strict-Transport-Security header, which prevents protocol downgrade attacks, requires a valid SSL certificate. Without it, HSTS cannot be enabled.
SEO Ranking Signal
Google uses HTTPS as a ranking factor. Sites without valid SSL certificates are flagged as "Not Secure" in the browser address bar, reducing trust and click-through rates.
API Protection
Laravel Sanctum, Passport, and API token authentication all depend on HTTPS to protect bearer tokens in transit. Without SSL, API tokens can be stolen via network sniffing.
Stay Updated on Laravel Security
Get actionable security tips, vulnerability alerts, and best practices for Laravel apps.
Frequently Asked Questions
How do I check if my Laravel site has a valid SSL certificate?
Enter your URL in the checker above. It connects over HTTPS and inspects your certificate for validity, expiry, hostname match, TLS version, chain completeness, key strength, and signature algorithm. Results include an A-F grade and specific fix recommendations.
Why does my Laravel app need SSL?
SSL encrypts traffic between users and your server. Without it, login credentials, session cookies, and API tokens are sent in plain text. Laravel requires HTTPS for secure session cookies, CSRF protection, and HSTS headers. Google also uses HTTPS as a ranking signal.
How do I install an SSL certificate?
The easiest method is Let's Encrypt with Certbot. For Nginx: sudo certbot --nginx -d yourdomain.com. For Apache: sudo certbot --apache -d yourdomain.com. Laravel Forge handles SSL automatically. After installing, force HTTPS in Laravel with URL::forceScheme('https') in your AppServiceProvider.
What TLS version should I use?
Support TLS 1.2 and TLS 1.3 only. TLS 1.0 and 1.1 have known vulnerabilities and are deprecated by all major browsers. In Nginx: ssl_protocols TLSv1.2 TLSv1.3;
My certificate is expiring soon. How do I renew it?
For Let's Encrypt, run sudo certbot renew. Verify auto-renewal is working with sudo certbot renew --dry-run. For paid certificates, contact your Certificate Authority. StackShield can monitor your certificate expiry date and alert you before it expires.
Does this tool access my private data?
No. It makes a single standard HTTPS connection, the same as any browser visiting your site. It only reads the certificate and TLS parameters from the connection handshake. It does not scan for vulnerabilities, test endpoints, or access non-public resources.
Related Tools
Laravel Security Scanner
30+ Laravel-specific security checks including .env exposure, debug mode, and Telescope detection.
Security Headers Checker
Analyze your HTTP security headers: HSTS, CSP, X-Frame-Options, and more with A-F grading.
Fix Weak SSL/TLS
Step-by-step guide to configuring strong SSL/TLS on Nginx and Apache for your Laravel application.
Related Reading
Monitor SSL Continuously
Certificates expire, configurations change after deployments, and auto-renewal can fail silently. StackShield monitors your SSL certificate (and 29 other checks) automatically and alerts you before issues affect visitors.
No credit card required. 14-day free trial on all plans.