A+
sslchk.sh
Trusted by all major browsers
- Expires
- Jan 17, 2027
- Issuer
Let's Encrypt YE1- Protocols
- TLS 1.3, TLS 1.2
- Key
- ECDSA P-256
SSL Certificate Checker
Certificate, chain of trust, TLS versions and security headers, graded from A+ to F.
What a check covers
CertificateDates, name match, key and signature
Chain of trustVerified up to a trusted root
ProtocolsTLS 1.0 to 1.3 and forward secrecy
Headers and DNSHSTS, preload and CAA records
Certificate toolkit
Runs in your browser. Keys never leave your device.A+
ExcellentAn A, plus HSTS for six months or more and no old TLS.
A
StrongScores 85 or more with a trusted certificate.
B
Minor gapsScores 70 to 84, or still allows TLS 1.0, 1.1 or 3DES.
C
OutdatedScores 55 to 69, or accepts RC4 or a key under 2048 bits.
D
WeakScores 40 to 54. Several serious problems to fix.
F
Expired or brokenExpired, no TLS 1.2 or 1.3, or scores under 40.
T
Not trustedWrong name, self-signed or an incomplete chain.
%
The scoreCertificate 30, protocols 30, key exchange 20, ciphers 20.
Every report is also available as plain text or JSON, for scripts, monitoring and quick checks over SSH.
$ curl -L sslchk.sh/sslchk.shPlain text report$ curl -L sslchk.sh/api/sslchk.shJSON report$ curl -L sslchk.sh/sslchk.sh/daysDays until the certificate expires, for monitoring$ curl -L sslchk.sh/sslchk.sh sslchk.sh A+ 99/100 Certificate Trusted, expires Jan 17, 2027 (89 days) Issuer Let's Encrypt YE1 Key ECDSA P-256, signed with SHA-384 Chain 4 sent, ends at ISRG Root X2 Protocols TLS 1.3, TLS 1.2 HSTS 6 months, includeSubDomains, preload Attention No CAA record
$ curl -L sslchk.sh/api/sslchk.sh { "host": "sslchk.sh", "grade": "A+", "score": 99, "trusted": true, "certificate": { "names": ["*.sslchk.sh", "sslchk.sh"], "issuer": { "common_name": "YE1", "organization": "Let's Encrypt", "country": "US" }, "not_after": "2027-01-17T00:16:55Z", "days_left": 89, … }, "protocols": { "tls13": true, "tls12": true, "tls11": false, "tls10": false }, "attention": [ { "code": "no_caa", "level": "fix", … }, { "code": "hsts_preload_unlisted", "level": "note", … }, { "code": "no_ocsp", "level": "note", … } ], … }