Free SSL Certificate Checker

Check your SSL certificate installation in seconds. Verify TLS version, expiry, chain, and key strength with an A-F grade.

Analyzing SSL certificate...

Connecting securely and evaluating 8 certificate checks.

8 Checks We Run

A complete SSL/TLS health check covering everything from certificate validity to cipher strength.

Certificate Validity

Verifies the certificate is currently valid and has not expired or been issued for a future date.

Certificate Expiry

Checks how many days remain until expiry. Warns at 30 days and flags critical at 14 days.

Hostname Match

Confirms the certificate covers your domain, including wildcard and Subject Alternative Name (SAN) matching.

TLS Version

Verifies the server uses TLS 1.2 or 1.3. Flags deprecated TLS 1.0 and 1.1 as insecure.

Certificate Chain

Checks that intermediate certificates are served, ensuring compatibility with all browsers and devices.

Certificate Authority

Detects self-signed certificates that browsers will not trust, causing security warnings for visitors.

Key Strength

Verifies the public key meets minimum strength requirements: 2048-bit RSA or 256-bit ECDSA.

Signature Algorithm

Confirms the certificate uses SHA-256 or stronger. Flags deprecated SHA-1 signatures.

Why SSL Matters for Laravel Applications

SSL/TLS is the foundation of your Laravel application's security. Without a properly configured certificate, session cookies, CSRF tokens, API keys, and user data travel in plain text across the network.

Session Security

Laravel's SESSION_SECURE_COOKIE flag only works over HTTPS. Without SSL, session cookies can be intercepted on any network hop between user and server.

HSTS Requirement

The Strict-Transport-Security header, which prevents protocol downgrade attacks, requires a valid SSL certificate. Without it, HSTS cannot be enabled.

SEO Ranking Signal

Google uses HTTPS as a ranking factor. Sites without valid SSL certificates are flagged as "Not Secure" in the browser address bar, reducing trust and click-through rates.

API Protection

Laravel Sanctum, Passport, and API token authentication all depend on HTTPS to protect bearer tokens in transit. Without SSL, API tokens can be stolen via network sniffing.

Stay Updated on Laravel Security

Get actionable security tips, vulnerability alerts, and best practices for Laravel apps.

Frequently Asked Questions

How do I check if my Laravel site has a valid SSL certificate?

Enter your URL in the checker above. It connects over HTTPS and inspects your certificate for validity, expiry, hostname match, TLS version, chain completeness, key strength, and signature algorithm. Results include an A-F grade and specific fix recommendations.

Why does my Laravel app need SSL?

SSL encrypts traffic between users and your server. Without it, login credentials, session cookies, and API tokens are sent in plain text. Laravel requires HTTPS for secure session cookies, CSRF protection, and HSTS headers. Google also uses HTTPS as a ranking signal.

How do I install an SSL certificate?

The easiest method is Let's Encrypt with Certbot. For Nginx: sudo certbot --nginx -d yourdomain.com. For Apache: sudo certbot --apache -d yourdomain.com. Laravel Forge handles SSL automatically. After installing, force HTTPS in Laravel with URL::forceScheme('https') in your AppServiceProvider.

What TLS version should I use?

Support TLS 1.2 and TLS 1.3 only. TLS 1.0 and 1.1 have known vulnerabilities and are deprecated by all major browsers. In Nginx: ssl_protocols TLSv1.2 TLSv1.3;

My certificate is expiring soon. How do I renew it?

For Let's Encrypt, run sudo certbot renew. Verify auto-renewal is working with sudo certbot renew --dry-run. For paid certificates, contact your Certificate Authority. StackShield can monitor your certificate expiry date and alert you before it expires.

Does this tool access my private data?

No. It makes a single standard HTTPS connection, the same as any browser visiting your site. It only reads the certificate and TLS parameters from the connection handshake. It does not scan for vulnerabilities, test endpoints, or access non-public resources.

Monitor SSL Continuously

Certificates expire, configurations change after deployments, and auto-renewal can fail silently. StackShield monitors your SSL certificate (and 29 other checks) automatically and alerts you before issues affect visitors.

No credit card required. 14-day free trial on all plans.