Checker
SSL certificate expiry checker
Paste an https URL you are allowed to test. After the host passes the private-network checks, LeakWatch opens one TLS connection and reads the certificate date. It does not change anything on the server.
The free report names every finding, with its severity and category. The most serious one is shown in full. The others keep the location, evidence, and fix prompt for the $19 Proof Report. One free scan per network every 30 days.
What this page is for
Expired or not trusted
An expired certificate, a name that does not match the site, or a certificate without a trusted issuer is high. Visitors will see a browser warning.
Expires within 14 days
A certificate that is still valid but expires within 14 days is medium, so there is time to renew it.
Plain HTTP
An http URL has no certificate to read. The scan notes that the traffic can be read on the network and does not invent an expiry date.
Questions
- Do you accept a private or localhost address?
- No. The certificate is read only after the same checks that refuse localhost, private addresses, and cloud metadata.
- Is this a separate scan?
- No. It is the same free scan, so keys, tables, and public files are checked too.
A Proof Report is $19 once. Monitoring is $9/month. Pro is $29/month. No subscription is required for the report. See pricing.