SSL Issue Checker

SSL Issue Checker inspects the TLS/SSL certificate of the site in your active tab — with a live, real TLS handshake, not a cached third-party lookup — and shows you everything that matters at a glance. WHAT'S NEW IN 2.4.1 • New checks for missing security headers — Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), and X-Frame-Options — flagged as low-severity hardening notices, translated in all 8 supported languages. • Domain registration lookups now query the domain's own registry directly over the public RDAP/WHOIS protocol instead of a third-party API — same data shown, more resilient, and reflected in an updated privacy policy. • Fixed: a site with nothing wrong except a missing hardening header no longer shows the "Could not fully check this site" verdict — it now correctly reads as no issues found, with the hardening notices still listed below. WHAT IT SHOWS SSL / Certificate • Organization and Issuer of the certificate • Validity dates — when it was issued and when it expires, with friendly durations ("in 2m 20d") • Negotiated TLS protocol and cipher suite • Certificate chain length, completeness, and trust status • Revocation status — checked live against the issuing CA's OCSP responder and/or certificate revocation list (CRL), so a revoked certificate is flagged even if the site still serves it • OCSP stapling, TLS handshake time, and the hostnames the certificate covers Hosting • Resolved server IP address (IPv4 or IPv6), linked to its ipinfo.io lookup • Server software (Server / X-Powered-By headers) and HTTP/2 support • Approximate server location (city and country, with a flag) • Network operator (ASN), linked to both ipinfo.io and Cloudflare Radar Domain • Registrar and domain registration/expiry dates • Detected DNS provider and registered owner organization ISSUES, CALLED OUT CLEARLY Expired or not-yet-valid certificates, self-signed certificates, hostname mismatches, incomplete certificate chains, untrusted roots, revoked certificates, weak cryptography (SHA-1/MD5 signatures, RSA keys under 2048 bits), outdated TLS 1.0 support, and missing HTTPS. Domain-age warnings catch a common phishing pattern: a site whose domain was registered less than 10 days ago is flagged red, and less than 30 days ago yellow. You also get an early heads-up when the certificate — or the domain registration itself — is within 14 days of expiring. Low-severity hardening notices flag when a site doesn't send a Strict-Transport-Security, Content-Security-Policy, or X-Frame-Options header. Every issue carries a severity level, summarized as a coloured badge on the toolbar icon. TWO WAYS TO VIEW • Toolbar popup — click the icon for the full breakdown, with a re-scan button. • Optional floating panel — a small draggable card rendered on the page itself that follows you across normal browsing until you turn it off. It has a full mode and a compact mode (status, location flag, org and issuer at a glance), and it remembers where you placed it. AVAILABLE IN 8 LANGUAGES English, German, Simplified Chinese, Turkish, Japanese, Russian, French, and Brazilian Portuguese — switch languages from the globe icon in the popup header, independent of your browser's own display language. ZERO SETUP, MINIMAL DATA No account, no API key, no configuration. Only the bare hostname of the active tab (never the full URL, never page content or history) is sent to the extension's own backend, which performs the check. No analytics, no tracking, no ads. Privacy policy: https://ssl-checker.anilrv.in/api/privacy Useful for developers, site owners, and security-conscious users who want to see at a glance who issued a site's certificate, when it expires, and where the site is actually hosted.