Deutsch

Tips › SSL Domain Detective

How do I check when a TLS certificate expires?

Every certificate has an end date, and you can look it up for any website. There are two simple ways to do it.

In a browser

Click the padlock in the address bar and open the certificate details. The 'valid from' and 'valid to' dates are shown there. The exact menu names differ between browsers.

With a command-line tool

On many systems, this command prints the dates of a site's certificate: echo | openssl s_client -connect example.com:443 -servername example.com 2>/dev/null | openssl x509 -noout -dates

Reading the result

notBefore is the start and notAfter is the end. The certificate stops being valid at the end time, not at midnight of the end day, so check the full time. Note the date together with the time.

Other services on the domain

Mail servers and other services can have their own certificates on other ports. A website check does not cover them.

SSL Domain Detective gathers the certificate end dates of your domains in one coloured list. Open SSL Domain Detective

Related tips

SSL Domain Detective is now available on the App Store.

Last reviewed: 2026-11-02

#SSL #TLS #Certificates #DomainExpiry #SysAdmin #MSP #iOS

This page gives general information and is not legal, financial or medical advice. [email protected]