Enter a public website hostname to check its live HTTPS certificate. ScoutLab verifies the public destination before connecting and reports a bounded set of certificate facts without signing you up or storing the result.
This utility checks one part of the picture. ThreatScout's broader free scan also reviews HTTPS, security headers, DNS and email-protection signals.
Run the full free website security scanThe checker performs a public-address-validated TLS handshake with the nominated hostname and reports certificate status, including invalid certificates when the handshake can complete. It does not follow redirects or fetch the HTTP page.
HTTPS encrypts traffic between a visitor and the website and gives the browser a way to validate the hostname. A perfectly valid certificate can still sit in front of outdated software, weak administration controls or vulnerable application code.
Use certificate checking as one transport-security signal, not as a complete website security assessment.
Certificate renewal is normally automated, but automation can fail after hosting, DNS or platform changes. An expired certificate can stop visitors reaching a site normally and can interrupt integrations that expect valid TLS.
Ongoing external monitoring is useful where you want visibility into certificate and configuration drift instead of relying on a one-off check.
For example, a valid certificate with 12 days remaining is trusted now but needs a renewal check soon. Confirm your hosting provider's automatic renewal and recheck after renewal; the displayed expiry is a snapshot, not an alert subscription.
Expired means the validity period has ended. Not yet valid means it has not started. A hostname mismatch means the certificate does not cover the requested name, while an untrusted chain means the connection could not establish trust. Ask your host to check the certificate and intermediate chain for the exact hostname.
The negotiated TLS protocol describes this connection only. This checker does not enumerate all supported TLS versions or cipher suites, test revocation comprehensively, or inspect every server behind a CDN.
ScoutLab's checker verifies a live HTTPS connection to the public hostname and reports bounded certificate facts such as issuer, validity dates, days remaining and the negotiated TLS protocol when available.
No. A valid certificate protects the encrypted connection and validates the hostname. It does not test application code, accounts, patching, malware or every vulnerability on the website.
No. This public tool accepts public hostnames only and deliberately rejects literal IP addresses and non-public destinations.
The two hostnames may use different hosting or CDN configurations. This certificate-only check does not follow redirects. Check each hostname visitors use independently, including www and the root domain, to see the certificate presented for that name.
