Check any website's SSL certificate and security headers.
Enter a domain without protocol (e.g. example.com, not https://example.com)
Enter a domain and CipherForces SSL Checker reports the certificate issuer, expiry date, TLS version, cipher suite, and the full security-header profile (HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy). Identifies weak configurations and gives grade.
Note: Unlike most of our tools, this one necessarily makes a server-side TLS handshake — browsers can't perform TLS-level introspection directly. The request is routed through our /api/ssl-check endpoint with SSRF protection (private IPs and loopback addresses blocked).
Type the domain into the SSL Certificate Checker without the protocol, like example.com, then press Check. The tool connects to the site over HTTPS, confirms the certificate works, and reports whether HTTP redirects to HTTPS plus which security headers are present, with a score and fix recommendations.
Only the domain name you enter is sent to our server so it can complete a TLS handshake with that site, which a browser cannot do across origins. No files are uploaded, no account is needed, the tool is free, and no other data about you is stored from the check.
It checks for HSTS (Strict-Transport-Security), Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. It also verifies HTTPS works and that HTTP redirects to HTTPS. Each item adds to your score, and missing headers come with specific recommendations on how to add them.
No. This certificate checker is informational only and is not a full security audit. It confirms HTTPS works and flags missing security headers, but it does not test your application code, server configuration, or other vulnerabilities. Treat the score as a starting point, not a guarantee.
Drag and drop or click to select your file.
Adjust quality, size, or format options.
Your processed file is ready instantly.
Generate SHA-1, SHA-256, SHA-384, SHA-512 hashes for text and files.
Open toolVerify file integrity by comparing SHA-256 checksums.
Open toolEncrypt text and files with AES-256. Decrypt with your password.
Open toolDecode a JSON Web Token to inspect its header, payload, and expiry.
Open tool