Check any site's SSL, DNS and email setup

What the full check looks at

The full check runs the most useful parts of every other tool at once, so you can see a site's health on one page.

• Is the site up? We request the home page over HTTPS, follow redirects and report the status code and how long it took. Anything in the 200s or 300s counts as up.
• SSL certificate. Whether it's valid today, when it expires, whether it covers the domain and whether browsers trust the chain.
• Domain registration. When the domain expires and where it's registered, straight from the registry over RDAP.
• DNS. Whether the name points somewhere, how many nameservers answer and whether there's a CNAME at the root.
• SPF and DMARC. The two records that decide whether other people can send email as you, and whether your own email lands in spam.

Pass, warn and fail

Fail means something is broken or will break soon for visitors or email. Warn means it works but is weaker than it should be, like an SPF record that doesn't stop spoofing. Pass means it's set up the way we'd recommend. Every warning and failure comes with how to fix it.

Common problems we see

• A certificate that stopped auto-renewing after a server move.
• A domain on auto-renew with an expired card on file.
• No DMARC record at all, so mail providers trust the domain's email less.
• The www. version of the site working but the bare domain not, or the other way round.

More free tools

• SSL checker: See when a certificate expires, who issued it and whether browsers trust it.
• DNS lookup: Every record for a domain, with what each one does.
• DMARC & SPF: Find out if your email can be spoofed or sent to spam, and get the exact record to fix it.
• Is it down?: We'll check the site right now from our servers, not your network.
• Domain expiry: When a domain expires and where it's registered, straight from the registry.