How do I install an SSL certificate on my Laravel application?

The easiest method is Let's Encrypt with Certbot. For Nginx: sudo certbot --nginx -d yourdomain.com. For Apache: sudo certbot --apache -d yourdomain.com. Laravel Forge and Vapor handle SSL automatically. After installing, force HTTPS in Laravel by setting APP_URL to https:// and adding the ForceScheme middleware or using URL::forceScheme('https') in your AppServiceProvider.

What TLS version should my Laravel app use?

Your server should support TLS 1.2 and TLS 1.3. TLS 1.0 and 1.1 are deprecated and have known vulnerabilities. In Nginx, set: ssl_protocols TLSv1.2 TLSv1.3; In Apache, set: SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1. TLS 1.3 provides better performance and security with faster handshakes and stronger cipher suites.

How often should I check my SSL certificate?

Check after every server configuration change and monitor expiry dates continuously. Let's Encrypt certificates expire every 90 days. Even with auto-renewal, issues like DNS changes, server migrations, or Certbot failures can cause unexpected expiration. StackShield monitors your SSL certificate automatically and alerts you before it expires.

Does this tool scan for vulnerabilities?

No. This tool only inspects your SSL/TLS certificate and connection parameters. It makes a standard HTTPS connection, the same as any browser. It does not scan for application vulnerabilities, test endpoints, or access non-public resources. For comprehensive security monitoring including 30+ checks, try StackShield's free trial.

Free SSL Certificate Checker

Check your SSL certificate installation in seconds. Verify TLS version, expiry, chain, and key strength with an A-F grade.

Analyzing SSL certificate...

Connecting securely and evaluating 8 certificate checks.

Frequently Asked Questions

How do I check if my Laravel site has a valid SSL certificate?

Enter your URL in the checker above. It connects over HTTPS and inspects your certificate for validity, expiry, hostname match, TLS version, chain completeness, key strength, and signature algorithm. Results include an A-F grade and specific fix recommendations.

Why does my Laravel app need SSL?

SSL encrypts traffic between users and your server. Without it, login credentials, session cookies, and API tokens are sent in plain text. Laravel requires HTTPS for secure session cookies, CSRF protection, and HSTS headers. Google also uses HTTPS as a ranking signal.

How do I install an SSL certificate?

The easiest method is Let's Encrypt with Certbot. For Nginx: sudo certbot --nginx -d yourdomain.com. For Apache: sudo certbot --apache -d yourdomain.com. Laravel Forge handles SSL automatically. After installing, force HTTPS in Laravel with URL::forceScheme('https') in your AppServiceProvider.

What TLS version should I use?

Support TLS 1.2 and TLS 1.3 only. TLS 1.0 and 1.1 have known vulnerabilities and are deprecated by all major browsers. In Nginx: ssl_protocols TLSv1.2 TLSv1.3;

My certificate is expiring soon. How do I renew it?

For Let's Encrypt, run sudo certbot renew. Verify auto-renewal is working with sudo certbot renew --dry-run. For paid certificates, contact your Certificate Authority. StackShield can monitor your certificate expiry date and alert you before it expires.

Does this tool access my private data?

No. It makes a single standard HTTPS connection, the same as any browser visiting your site. It only reads the certificate and TLS parameters from the connection handshake. It does not scan for vulnerabilities, test endpoints, or access non-public resources.