YourAnalystAI Website Analysis & SEO Tools

SSL / HTTPS Checker

Check the HTTPS configuration of a public website with non-invasive diagnostics. The tool examines HTTPS availability, HTTP-to-HTTPS redirects, publicly logged certificates, selected security headers and possible mixed-content references.

Check a domain

Enter a public domain such as example.com or a full HTTP/HTTPS URL.

What this tool does

  • Checks whether the HTTPS version of the submitted domain can be reached and reports the response available to the test.
  • Checks the HTTP version and looks for an HTTP-to-HTTPS redirect.
  • Retrieves publicly available Certificate Transparency information for the domain when available.
  • Reports selected HTTP security headers returned by the checked endpoint, such as HSTS, CSP and X-Content-Type-Options when accessible.
  • Examines retrieved page HTML for references to resources that use plain HTTP on an HTTPS page.

What it deliberately does not do

This is a diagnostic tool, not a penetration-testing service. It does not perform port scans, brute-force attempts, vulnerability exploitation or intrusive connection testing.

Browser security restrictions also prevent JavaScript from directly exposing certain TLS connection details of other websites. When information cannot be obtained reliably, the tool reports it as unavailable instead of guessing.

Limitations & transparency

Certificate Transparency data shows certificates that have been publicly logged as issued for matching domain names. It does not prove which certificate a server is currently presenting during a live TLS connection.

The tool therefore treats certificate information as historical or publicly logged data rather than as a definitive replacement for a live server-side TLS handshake.

External services may also be temporarily unavailable, rate limited or unable to retrieve a particular website. Results can therefore differ from checks performed from another network or using a dedicated server-side scanner.

The submitted domain may be transmitted to the external services required to perform the requested checks. YourAnalystAI does not maintain a database of submitted domains or generated reports. See the Privacy Policy .

HTTPS, TLS and certificates explained

HTTPS
HTTPS is HTTP transmitted over a TLS-secured connection. TLS helps protect information while it travels between a browser and a website and helps authenticate the server through its certificate.
TLS
Transport Layer Security is the cryptographic protocol used to establish secure HTTPS connections. Modern websites commonly support TLS 1.2 and TLS 1.3, while older protocol versions have been deprecated.
Digital certificate
A digital certificate associates a domain name with a public cryptographic key and contains information about the certificate issuer and validity period. Browsers use certificates as part of establishing trust in an HTTPS connection.
Certificate expiration
HTTPS certificates are valid for a limited period and must be renewed. An expired certificate can cause browsers to display a security warning. Certificate Transparency data can show certificate validity periods, but does not confirm which certificate is currently active on a server.
Mixed content
Mixed content occurs when an HTTPS page references resources using plain HTTP. Depending on the resource and browser, some mixed content may be blocked or otherwise handled differently. Moving resources to HTTPS helps maintain consistent transport security.
HSTS
HTTP Strict Transport Security (HSTS) is a response header that tells supporting browsers to use HTTPS for future connections to the site for the configured period.
Content Security Policy
Content Security Policy (CSP) is an HTTP response header that can restrict which types of resources a browser is allowed to load. A correctly configured CSP can reduce certain classes of client-side security risks.

Frequently Asked Questions

Why can't the tool read the live TLS certificate directly?
A browser-based JavaScript page cannot directly inspect the TLS certificate presented by another website. Server-side SSL checkers can establish their own TLS connections, while this tool uses browser-accessible diagnostics and publicly available certificate transparency data where applicable.
Why are several certificates listed for my domain?
Certificate Transparency logs can contain multiple certificates issued for the same domain over time. They can represent renewals, replacements, different configurations or certificates that are no longer in use. The list alone does not prove which certificate the server currently presents.
What does it mean if HTTP does not redirect to HTTPS?
It means the HTTP request did not produce the expected redirect to an HTTPS URL during the check. The result can depend on server configuration, redirect rules, proxies and the service used to perform the request. Use the HTTP Status Checker for additional response and redirect information.
Can I check a website I do not own?
The tool is designed for non-invasive checks of publicly accessible websites. It does not perform port scanning, brute-force attempts, vulnerability exploitation or other intrusive security testing.

Related tools

HTTP Status Checker

Check HTTP response codes, redirects and response headers for a public URL.

Open Tool

DNS Lookup

Inspect DNS records such as A, AAAA, CNAME, MX and CAA records for a domain.

Open Tool

SEO Checker

Continue with on-page checks for HTTPS, canonical URLs, headings, metadata, structured data and more.

Open Tool

Learn more in the Guides