RedScore.ai

Free SSL checker

Check TLS and certificate health on your live domain

See whether browsers get valid HTTPS before customers or scanners flag it.

Expired certs, weak TLS settings, and missing HTTPS redirects break trust fast. RedScore checks certificate health and TLS posture on your production hostname in about 60 seconds. Start at /lookup.

Scan your domain

Free scan · No signup · Results in ~60 seconds · Opens /lookup

example-corp.com

✓ scan complete · grade D · 4 issues

42/ 100
Grade D

AI summary

DMARC enforcement is missing, which leaves spoofing open. SPF is too permissive. Several key web security headers are absent.

FAILDMARC enforcement
FAILSPF policy strength
WARNWeb headers & TLS hardening
WARNCookie secure flag
PASSGoogle Safe Browsing

Why SSL checks matter

Certificate problems are visible before anyone logs in

Browsers, prospects, and monitoring tools all see TLS issues immediately. RedScore grades certificate and HTTPS posture from the outside so you fix public trust gaps first.

Built for production domains

TLS grades inside a full domain scan

One scan covers certificates, headers, DNS, email auth, and exposure.

Certificate health

Validity and HTTPS posture on your live hostname.

Production-first

Scan the domain customers hit, not localhost or staging.

Fix-first ranking

Know which TLS gaps to close before the next launch.

About 60 seconds

Passive outside-in scan with no signup required.

What you get

SSL/TLS grades plus nine other areas

RedScore returns certificate category grades, a 0-100 score, and a prioritized summary across your public footprint.

C62DNS & Domain Security
D48Email Security
B75Infrastructure Hygiene
C68Web Application Security
F32Cookie & Privacy Hygiene
D45Technology Fingerprinting
B78Public Exposure
A91Certificate & PKI Health
B82Brand & Domain Reputation
C55Third-Party Risk Surface
63/ 100
Grade C

63 / 100

Grade C

example-corp.com

AI summary

Cookie settings are weak and server headers reveal stack details. Email spoofing is plausible with incomplete SPF and DMARC.

Email auth gaps
Header hardening
Certificate hygiene

What RedScore checks today

Public TLS and certificate signals

  • Certificate validity on the live hostname
  • HTTPS and TLS posture visible to browsers
  • Security headers on deployed responses
  • HSTS and related hardening signals where visible
  • Related DNS and web posture on the same domain

What this does not replace

This is not a cipher-suite lab audit or internal PKI review. It checks public TLS and certificate signals visible from the internet. Detailed cipher findings unlock for verified domain owners.

After the free scan

Claim your domain for full TLS detail

Free scans show safe summary grades. Claim the domain to unlock complete certificate findings and monitoring.

  • Full TLS and certificate finding detail
  • Scheduled scans and change alerts
  • Track cert renewals and regressions over time

FAQ

Common questions

Check SSL on your domain

Free scan · No signup · ~60 seconds

Scan your domain