SSL certificate: control without surprises
What the tool checks
The service connects to the site over HTTPS and shows the certificate issuer, validity period, the list of domains (SAN), the completeness of the chain and the TLS version in use.
The most common problem is an expired certificate: the site instantly “goes down” for visitors even though the server is running. The second most common is an incomplete chain, which prevents the site from opening on some devices.
Recommendations
Set up automatic certificate renewal and expiry monitoring. Use TLS 1.2+ and disable outdated protocols.
Make sure the whole site works over HTTPS with a 301 redirect from HTTP, and that pages have no mixed content — images and scripts loaded over HTTP.