Certificate Inspector

// decode · verify the chain · check expiry and names of your TLS certificates

Certificate or chain (PEM)

Paste only: this page never connects to your server. To get your own site's chain, run openssl s_client -connect your-app.example:443 -servername your-app.example -showcerts </dev/null and paste the output, or use your fullchain.pem. Sample certificates are generated fresh in your browser.

Or drop a .pem, .crt, .cer or .der file Read in this tab and never uploaded

Hostname to check (optional)