SSL/TLS certificate check

SSL/TLS certificate check analyzes a live host’s certificate and TLS configuration, produces an A+ to F security grade, and shows certificate, protocol, and vulnerability findings. Open it at SSL security check.

Supported input

The input field accepts:

• example.com: checks port 443 by default.
• example.com:8443: checks a custom port.
• 192.168.1.100: checks an IP address.
• https://example.com: protocol prefixes are accepted.

Note

The current frontend provides single-host checks. Batch checks and report file downloads are not available on the latest page.

Run a check

1. Enter the host

   Enter a domain or IP address. You can include a port.

2. Start the check

   Click Start check. The tool establishes TLS connections and analyzes certificates, protocols, and vulnerabilities. A full check usually takes 1 to 3 minutes.

3. Wait for progress

   While the check is running, the page shows task progress and lets you cancel the task.

4. Review the result

   The result card shows grade, IP, CN, certificate expiry, chain status, and an issue summary.

5. Open the full report

   Click View full report to open the drawer with Protocol support, Vulnerability detection, and Certificate information tabs.

Understanding results

Security grade

Grades range from A+ to F:

• A+ / A: strong security configuration.
• B: generally good, with room for improvement.
• C: issues require attention.
• D / F: high risk and should be remediated quickly.

Issue summary

The result card summarizes protocol and vulnerability issues by severity:

• Critical.
• High.
• Medium.

If no Medium-or-higher issue is found, the page shows a positive summary.

Full report

The report drawer contains three tabs:

• Protocol support: TLS/SSL protocol support and security evaluation.
• Vulnerability detection: TLS vulnerabilities, CVEs, and severity.
• Certificate information: subject, issuer, validity, SANs, and chain validation.

Caution

If old protocols, invalid chains, expiring certificates, or high-risk vulnerabilities are found, fix the live configuration first and then re-run the check.

Check history

The page shows check history with:

• Domain, IP, and port.
• Grade and score.
• Check status.
• Check time.

History supports search, pagination, detail view, sharing, and re-checking. The page also shows total check count and the A-grade ratio for the current history set.

Follow-up actions

The result card provides:

• Re-check: run the check again for the same host.
• Create monitor: open Domain monitoring with the domain prefilled.
• Request certificate: open Certificate management with the domain prefilled.
• Share: open the share dialog for the check result.

FAQ

What if the check times out?

Common causes include slow server response, unstable network, or complex TLS configuration. Retry later or confirm that the target port is reachable from the public internet.

Why is my grade not A+?

Common reasons:

• TLS 1.3 is not enabled.
• Old protocols or weak configuration are still supported.
• The certificate chain is incomplete.
• The certificate is expiring soon.
• Medium-or-higher TLS vulnerabilities were detected.

Does SSL check affect my service?

The tool performs TLS handshakes and reads configuration. It does not send business requests, so normal impact is minimal.