SSL Checker

The certificate is read from the host on port 443: validity dates and days remaining, issuer and subject, serial, signature algorithm, chain length, and the full list of names it covers.

Two failures matter most and are stated first — a certificate that has expired, and one that is valid but does not cover the name you visited. A browser shows both as the same broken padlock.