One hostname. The certificate as the server gave it — every field, every gap.

Certline opens a real TLS connection to any hostname and reports exactly what the server presented: the expiry date, days remaining, issuer, every hostname the certificate covers, and whether the intermediate chain is complete.

Check a certificate Pricing

certline checked github.com at 2026-08-05T14:32:00Z [pass] Valid until Aug 5 00:00:00 2027 GMT — 365 days remaining issuer: DigiCert TLS Hybrid ECC SHA384 2020 CA1 subject: github.com SANs: DNS:github.com, DNS:www.github.com chain depth: 2 · chain complete fingerprint: AB:CD:EF:01:23:45:67:89:AB:CD:EF:01:23:45:67:89:AB:CD:EF:01 TLS: TLSv1.3

What Certline tells you

✓
Expiry date & days remainingKnow exactly when the certificate expires, in plain language. No date format puzzles.
✓
Issuer & subjectWho issued the certificate and to whom, pulled from the server’s own response.
✓
Subject Alternative Names (SANs)Every hostname the certificate covers, listed individually so you can verify your domain is included.
✓
Chain completenessDid the server send its intermediate certificate? Desktop browsers may cache it; mobile clients won’t. Certline tells you if the chain is whole.
✓
TLS version & fingerprintThe protocol negotiated and the SHA fingerprint of the leaf certificate.

Who it is for

The person who gets the call when the site stops loading. You inherited a server (or run three) and you need to know which certificate expires first, and whether the chain is whole. No login, no API key, no account. Paste a hostname and get the answer.

Check a certificate