Home / Knowledge Base / Tools and integrations / SSL Certificate Check: Validity, Chain, Protocols

SSL Certificate Check: Validity, Chain, Protocols

Tools and integrations 2 min read Updated 12.09.2026
What to look for in the check report, why the site may open for you but break for the bot, what to do for each error, and how it relates to promotion.

The certificate is responsible for https: without it, the browser marks the site as unsafe, and some visitors leave before it loads. You can check the validity, chain, and supported protocols by checking the SSL certificate.

What to Look for in the Report

ParameterWhat Should Be
ValidityMore than two weeks in advance; free certificates last about three months and renew automatically
Name in the CertificateMatches the domain, including the www variant
Chain of TrustComplete: without the intermediate certificate, some clients will show an error
ProtocolsTLS 1.2 and 1.3; outdated versions are better disabled
IssuerWell-known certification authority, not a self-signed certificate
Common Trap: Works in Browser, Breaks for Bot
Browsers cache intermediate certificates, so an incomplete chain may open normally for you, but not for a search bot or mobile application. That’s why you need to check with an external tool, not just "it opens for me".

What to Do in Case of Errors

  1. Expired. Renew the certificate and check that auto-renewal is indeed working.
  2. Name Mismatch. Add the necessary domains to the certificate or set up a separate one.
  3. Incomplete Chain. Upload the intermediate certificate to the server.
  4. Mixed Content. Replace links to images, styles, and scripts from http to https, otherwise the browser will complain even with a valid certificate.

Free or Paid Certificate

For the purpose of checking validity, there is no difference: both the browser and the bot check validity, not price. Free certificates are issued automatically and renew themselves — this is sufficient for the overwhelming majority of sites. Paid certificates make sense where extended organization verification, insurance, or support for rare scenarios is needed. The main thing is that auto-renewal actually works: an expired expensive certificate is worse than a timely renewed free one.

How This Relates to Promotion

Https is a basic requirement: a site without it loses trust and visitors. Additionally, a certificate error hinders our checks: the page may become inaccessible for crawling. A complete picture of security is provided by Shield, and security headers are discussed in the article on security headers.

FAQ

Why does the certificate work in the browser, but the tool shows an error?
Browsers cache intermediate certificates. With an incomplete chain, your site may open normally, but for the bot or mobile client, it does not.
How many days before expiration should I renew?
Keep a buffer of at least two weeks and check that auto-renewal is indeed working.
What is mixed content?
This is loading images, styles, or scripts over http on an https page: the browser marks the page as unsafe even with a valid certificate.
Was this article helpful?
Try it on your project Everything described in the article is available in the dashboard — the registration bonus is already in your balance.
Open dashboard