SSL Certificate

How to use SSL Certificate

Enter the public hostname serving HTTPS and run the certificate check after verification. Supports public IPv4 and native IPv6 addresses. For a domain, choose Auto IP, IPv4 or IPv6; Auto prefers IPv4 and uses IPv6 for IPv6-only domains. IPv6 connections require IPv6 connectivity at the test location.

Understanding the results

Review certificate trust, hostname coverage and expiry alongside TLS 1.0–1.3 connection outcomes, observed ciphers, forward secrecy, HSTS and OCSP stapling. Each run checks one selected public address on port 443. Cipher-suite enumeration, revocation validation and downgrade-attack testing are not included.

What does “certificate chain could not be verified” mean?

The certificate presented during the check could not be linked to a trusted issuer chain. Review the presented chain and required intermediate certificates. An unexpired leaf certificate alone does not establish trust.

Does a failed handshake mean that a TLS version is disabled?

Only an explicit protocol-version rejection is reported as rejected. Timeouts, connection resets and other handshake failures are inconclusive; retry the check.

Does an OCSP response mean the certificate has not been revoked?

This check reports whether a stapled response was received. It does not validate its signature, freshness or revocation status.