Free tool, no account

Does your padlock actually hold?

A certificate can be green on your machine and red on your customers’. Type your address: we open the connection and read the certificate line by line.

With or without “https://”: we only keep the domain name.

  • A real connection to your server
  • An answer in seconds
  • No account, no email address

The missing link, and why you cannot see it from your own desk

This is the most common certificate failure, and the most baffling. Your site opens perfectly on your computer, padlock and all: your browser already fetched the missing intermediate certificate on its own, and kept it. The same site refuses to open on an Android phone, in a mobile app or from another server, none of which kept anything. So you cannot observe the problem from your own machine, and your customers do not tell you about it: they leave. We open a fresh connection with nothing in memory, and tell you what your server actually sends.

What a padlock does not prove

A valid certificate proves one thing: that the connection is encrypted and that the site is the one whose name is in the address bar. It says nothing about that site’s honesty, and it is issued free in seconds, to fraudulent sites too. We also do not judge the strength of the cipher suite, shown as-is, nor the certificate’s revocation, which cannot be read from a plain connection.

With us, the certificate is not your problem

Wobelio installs, renews and watches the certificate of every published site, full chain and redirect included. Nobody ever has to think about it, and nothing expires on a Sunday.

Create my site
My site works on my machine, why do you say it is broken?

Because your browser kept the intermediate certificate your server forgets to send. An Android phone discovering your site has nothing in memory, and refuses the connection. We open a fresh connection on every test, which is exactly your new visitors’ point of view.

My certificate renews itself, do I still need to look?

Yes, now and then. Automatic renewal fails in silence, and you only find out the day the site goes down. That is why we raise the alarm once fewer than three weeks remain: by then, automatic renewal has already missed at least one attempt.

Should the certificate cover both “www” and the bare name?

Yes, both. Visitors type one or the other, and older links often carry the prefix. A certificate covering only one of the two forms sends the other half of your visitors to a security warning you will never see.

Is it really free?

Yes, no account needed. These tools are how some of our customers find us in the first place.

This tool is offered by Wobelio

Wobelio is a Belgian website builder: it lets you create, publish and manage a business website or an online shop without writing a line of code, hosting and HTTPS certificate included. This tool is free and also works on a website that is not hosted with us.

Measuring our campaigns

We would like to know which ads bring in customers. That means remembering where your visit came from and telling Meta, TikTok and Google about it. Nothing happens without your agreement, and the site works exactly the same if you decline. Our cookie policy.