Comprobador de Certificados SSL

Validación en vivo de cadenas de confianza X.509, conteo de días hasta expiración, nombres alternativos (SAN) y protocolos TLS en nodos perimetrales sin registro.

Free, no sign-upLive results, nothing stored
Check a list of domains (Bulk batch mode)
Drop a .txt or .csv list of domains here, or browse file
One domain per line (up to 50 domains). Runs batch audit in-browser.
Try Examples:

IncogSay Privacy & Stateless Architecture Guarantee

Stateless edge execution • Zero database retention • No user tracking or behavioral profiling

Zero-Log Verified
1Stateless Edge V8 Isolates

Every network lookup executes inside a temporary, isolated V8 sandbox deployed across Cloudflare's global edge. Each isolate is instantiated on demand, parses public DNS or TLS socket records in transient RAM, returns the result stream, and terminates immediately.

2Zero Query & IP Retention

IncogSay operates under a strict zero-retention guarantee. Target domains, submitted URLs, and user IP addresses are never written to disk, stored in relational databases, or logged in persistent files. We do not maintain historical query logs or link lookups to user identities.

3No Accounts, No Tracking Cookies

All tools are completely free and functional without registration, user logins, or account creation. We never deploy invasive session fingerprints, third-party analytics trackers that capture input payloads, or behavioral profilers. Your queries remain ephemeral and anonymous.

Compliance: Audited under GDPR Art. 5(1)(e) (Storage Limitation) & CCPA/CPRA Privacy Principles.Read full architecture documentation →

Operational Workflow — Comprobador de Certificados SSL

4-Stage Diagnostic Execution
Stage 01

Ingresa el nombre de host o dominio (ej. midominio.com o api.midominio.com) en el campo de búsqueda.

Stage 02

Haz clic en "VERIFICAR CERTIFICADO SSL" para iniciar el saludo TLS desde nuestro nodo en el borde.

Stage 03

Revisa la Autoridad Certificadora (CA) emisora, los nombres SAN cubiertos y la fecha exacta de validez.

Stage 04

Verifica los días restantes para la renovación y comprueba que la cadena intermedia esté completa sin errores de AIA.

Importancia de la Auditoría Preventiva de Certificados TLS

En el ecosistema web contemporáneo, la adopción de HTTPS ya no es opcional. Motores de búsqueda como Google utilizan HTTPS como señal de posicionamiento fundamental. Mantener los certificados actualizados mediante protocolos automatizados (ACME) y realizar verificaciones periódicas previene caídas imprevistas del servicio y sanciones algorítmicas.

Diagnóstico de Errores Comunes en Cadenas Intermedias

Uno de los fallos más frecuentes en configuraciones Nginx o Apache es omitir el certificado intermedio en el archivo fullchain.pem. Aunque algunos navegadores de escritorio subsanan este error mediante Authority Information Access (AIA Chasing), los dispositivos móviles y clientes cURL fallan de inmediato al no encontrar la cadena completa.

TLS Handshake & Certificate Authority Chain of Trust Hierarchy

Every SSL diagnostic query performs a live cryptographic handshake with port 443 of the target hostname, evaluating certificate chain integrity, cipher negotiation, and Certificate Transparency logs.

1Ordered Chain Completeness

Validates that the server serves the complete, ordered chain (End-Entity → Intermediate CA → Root CA), preventing mobile and Linux curl clients from failing due to AIA chasing gaps.

2Protocol Version & Forward Secrecy

Verifies TLS 1.3 priority and confirms deprecation of insecure TLS 1.0 and 1.1 protocol suites. Ensures ECDHE key exchange ciphers for forward-secret session security.

3SAN Coverage & Hostname Matching

Extracts all Subject Alternative Names (SANs) from the X.509 v3 extension. Detects common wildcard vulnerabilities where apex domains are omitted from *.domain.com certificates.

4Certificate Transparency (CT) Auditing

Cross-checks issuer fingerprints against public, tamper-evident Certificate Transparency logs to proactively flag unauthorized or rogue CA issuance events.

Practical Use Cases & Diagnostic Scenarios

Common administrative and operational scenarios solved by this tool

01Preventing Outages from Certificate Expiry

With modern CAs issuing certificates valid for only 90 days, automated renewal hooks (Certbot, acme.sh) can silently fail due to DNS validation timeouts or rate limits. Real-time auditing surfaces expiration windows before production traffic is blocked.

02Resolving Mobile Intermediate Chain Errors

While desktop Chrome caches intermediate CA certs, mobile browsers (iOS Safari, Android Chrome) and API clients strictly fail with SEC_ERROR_UNKNOWN_ISSUER if the server neglects to send the intermediate bundle. Our audit catches missing chain links instantly.

03Subject Alternative Name (SAN) Multi-Domain Auditing

Verify that your certificate covers all required hostnames, apex domains, and subdomains (e.g. both example.com and www.example.com or api.example.com), preventing ERR_CERT_COMMON_NAME_INVALID errors across distributed microservices.

04PCI DSS & Regulatory Cryptography Compliance

Confirm your web server enforces TLS 1.3 or strong TLS 1.2 with forward secrecy (ECDHE), while deprecating legacy TLS 1.0, TLS 1.1, and CBC ciphers to maintain strict compliance with PCI DSS 4.0, HIPAA, and SOC 2 transit standards.

Comprobador de Certificados SSL — Key Questions & Technical Answers

Direct, peer-reviewed engineering answers to core deployment, troubleshooting, and compliance questions.

Q¿Cómo compruebo si el certificado SSL de una web es válido?

Introduce el dominio en nuestro comprobador SSL. En menos de 2 segundos realiza un handshake TLS y analiza la cadena de certificación, la autoridad emisora y el periodo de vigencia.

Q¿Qué ocurre si un certificado SSL caduca?

Los navegadores bloquean el acceso mostrando advertencias de seguridad graves (como NET::ERR_CERT_DATE_INVALID), lo que destruye la confianza de los usuarios y reduce el tráfico orgánico.

Q¿Qué es la cadena de confianza SSL (Chain of Trust)?

Es la vinculación criptográfica entre el certificado final de tu servidor, uno o varios certificados intermedios y el certificado raíz de una Autoridad de Certificación confiable.

Q¿Garantiza IncogSay la privacidad de las consultas SSL?

Absolutamente. La consulta se ejecuta en memoria volátil en un worker aislado. El dominio consultado nunca se registra en disco ni en bases de datos analíticas.

Related tools

URL Scanner
Threat score analysis for any link.
Domain Age Checker
Lookup domain creation date and registrar.
Redirect Checker
Trace HTTP to HTTPS redirects.
SPF Checker
Validate SPF DNS email records.
DMARC Checker
Inspect DMARC policy enforcement.