Look up the certificates issued for a domain, with issuer, validity window and covered hostnames, plus a live check of whether HTTPS responds. The data comes from public certificate transparency logs.
How it works
- 1Enter the domain without https://.
- 2Check whether HTTPS responds and read the latest expiry date.
- 3Confirm that every subdomain you use appears among the covered names.
Can a valid certificate hide an unsafe site?
Yes. A certificate only proves domain identity and encrypts the connection. Malicious content, injected scripts and weak configuration remain possible.
Why are older certificates listed?
Transparency logs keep every certificate ever issued. What matters is the most recent entry with a current validity window and the right hostnames.