TLS certificate inspection
Certline opens a real TLS connection and tells you whether your server’s chain is complete — intermediate included or missing.
Paste a hostname. Certline opens a real TLS connection to that host on port 443, reads the certificate the server presents, and tells you in plain language when it expires, who issued it, every hostname it covers — and whether the intermediate was included or missing.
What the report gives you
- Expiry The exact date — and days remainingSits alone at the top of the report so it reads instantly.
- Issuer Who signed the certificateCommon name and organization, exactly as the server presented them.
- Covered hostnames Every name in the Subject Alternative NamesSo you see at a glance whether the certificate covers the host you care about.
- Chain completeness Did the server send its intermediate?A valid certificate still breaks connections when the intermediate is missing.
The point is the chain, not just the date
A certificate can be valid and the site still fail. Desktop browsers paper over a missing intermediate from their cache; mobile clients do not. That failure is invisible to anyone looking only at the expiry date — and it is the one people lose a weekend to.
Certline reads the certificate the server actually presents and reports whether the intermediate travelled with it. No guessing, no assumptions, no filling gaps with typical values. If a field is absent, the report says it is absent.
A certificate that is still valid will not load on a fresh client if the server omits the intermediate. Certline flags that chain verdict with warning and tells you in the report.
Answers on demand. Nothing else.
Certline answers when you ask it. It does not run on a schedule, and it does not reach you. There is no account, nothing is saved, and nothing survives a cleared browser.
- —No accountsNothing to sign up for, nothing stored about you.
- —No alerts or remindersThere is no mail sender here. The tool reports when you ask it.
- —No scheduled re-checksNothing runs when the page is closed.
- —One hostname at a timeIt checks exactly the host you type. It never scans a range or enumerates subdomains.