Enter a domain to see its SSL/TLS certificate: how many days are left, who issued it, whether browsers will trust it, whether the name matches and what the full certificate chain looks like.
Browsers show a full-page "Your connection is not private" warning and many visitors leave. Search engines and APIs may also stop trusting the site, so renew the certificate before it runs out.
The certificate could not be verified by the browser's list of trusted authorities. Common causes are an expired certificate, a self-signed one, a missing intermediate certificate, or a certificate issued for a different domain name.
Your certificate is signed by an intermediate authority, which is signed by a root authority that browsers already trust. If the server does not send the intermediate certificate, some devices show an error even though the certificate itself is fine.
TLS 1.2 or TLS 1.3. Older versions (TLS 1.0 and 1.1) are deprecated and browsers no longer accept them.