TLS certificate inspection

Certline opens a real TLS connection and tells you whether your server’s chain is complete — intermediate included or missing.

Paste a hostname. Certline opens a real TLS connection to that host on port 443, reads the certificate the server presents, and tells you in plain language when it expires, who issued it, every hostname it covers — and whether the intermediate was included or missing.


What the report gives you


The point is the chain, not just the date

A certificate can be valid and the site still fail. Desktop browsers paper over a missing intermediate from their cache; mobile clients do not. That failure is invisible to anyone looking only at the expiry date — and it is the one people lose a weekend to.

Certline reads the certificate the server actually presents and reports whether the intermediate travelled with it. No guessing, no assumptions, no filling gaps with typical values. If a field is absent, the report says it is absent.

A certificate that is still valid will not load on a fresh client if the server omits the intermediate. Certline flags that chain verdict with warning and tells you in the report.


Answers on demand. Nothing else.

Certline answers when you ask it. It does not run on a schedule, and it does not reach you. There is no account, nothing is saved, and nothing survives a cleared browser.