Frequently asked questions
What is ssltest.com?
A free SSL/TLS certificate and configuration checker. Submit a host and get a full report: certificate chain, hostname match, expiry, supported protocols and ciphers, known vulnerabilities, HSTS, CAA, and revocation status.
Is it free?
Yes, with no account, signup, or API key. Usage is rate-limited per IP for abuse prevention.
Which protocols are supported?
14 protocols: direct-TLS HTTPS, FTPS, SMTPS, POP3S, IMAPS, LDAPS, plus STARTTLS on SMTP, SMTP submission, IMAP, POP3, FTP, LDAP, XMPP, and NNTP.
How long is a report kept?
A report is cached as a shareable permalink for 24 hours. Use the Re-scan control on the report page to force a fresh scan at any time.
Are reports indexed by search engines?
No. Every report permalink is marked noindex; only the home page and the legal/docs pages are indexable.
Does ssltest.com store the certificate itself?
No. Certificate PEM data is used transiently to run OCSP/CRL checks and is stripped before the parsed result is stored. Only the parsed fields shown in the report (subject, issuer, dates, fingerprint, and similar metadata) are kept.
What does the grade mean?
The grade (A+ to F) summarizes protocol support, cipher strength, key exchange, and certificate quality. Serious issues (a known vulnerability, an expired certificate, a weak key) cap the grade regardless of other scores.
Can I use this from a script or an AI agent?
Yes. A free JSON API (api.ssltest.com) and an MCP server (mcp.ssltest.com) expose the same checks with no API key.