SSL & HTTPS Checker
Check SSL/HTTPS configuration from URL + HTML. Detect HTTPS protocol, mixed content (active/passive), validate HSTS header, estimate http→https redirect, generate recommendations. Honest disclaimer: this tool does NOT make live HTTPS requests. History (localStorage), shareable URL. 100% client-side.
About SSL & HTTPS Checker
Check SSL/HTTPS configuration from URL + HTML. Detect HTTPS protocol, mixed content (active/passive), validate HSTS header, estimate http→https redirect, generate recommendations. Honest disclaimer: this tool does NOT make live HTTPS requests. History (localStorage), shareable URL. 100% client-side. Everything runs locally in your browser — your data never leaves your device.
How to use
- Enter your input in the tool above.
- Adjust any options to your preference.
- Use the Copy or Download buttons to save the result.
- Everything happens locally — your data never leaves your browser.
FAQ
What does the SSL & HTTPS Checker actually check?
Three things: (1) the URL protocol — HTTPS or HTTP, (2) mixed content in pasted HTML — active (scripts/stylesheets/iframes with http://) and passive (images/audio/video), (3) HSTS header from pasted Strict-Transport-Security value. The tool does NOT make live HTTPS requests or inspect TLS certificates — see the disclaimer below.
Why can't this tool make live HTTPS requests?
Two reasons: (1) Browsers block cross-origin HTTPS requests via CORS — we can't read another site's certificate or headers from your browser. (2) It would violate UnQTools' privacy-first principle (no network calls at runtime). To verify a live site's SSL cert and headers, use server-side tools like SSL Labs' SSL Test, securityheaders.com, or curl from your terminal.
What is mixed content?
When an HTTPS page loads resources (images, scripts, stylesheets) over HTTP. Active mixed content (scripts/stylesheets/iframes) is blocked by modern browsers — the page breaks. Passive mixed content (images/audio/video) is loaded but browsers show a 'Not Secure' warning. Both hurt SEO and user trust.
What is HSTS and how do I configure it?
HTTP Strict-Transport-Security (HSTS) tells browsers to only use HTTPS for your site for a specified duration. Configure it via the Strict-Transport-Security response header: max-age=31536000; includeSubDomains; preload. After 1 year of clean HSTS, you can submit to the HSTS preload list (hstspreload.org).
What extra features does this tool have compared to others?
(1) HTTPS protocol detection. (2) Mixed content checker (active vs passive). (3) HSTS header validation. (4) Protocol analysis. (5) http→https redirect estimation. (6) SSL info display (from URL structure). (7) Recommendation engine. (8) Plain-text report copy. (9) Honest disclaimer about live checking. (10) History (localStorage, last 20). (11) Shareable URL.
Is my data sent anywhere?
No. All analysis runs locally on the URL/HTML/header text you paste. History is stored in localStorage on this device only.
Related tools
Affiliate Commission Calculator
Calculate affiliate commissions across four program types — flat percent, tiered percent (progressive brackets), recurring (monthly × N months), and hybrid (initial + recurring). Apply refund-rate and tax-withholding adjustments, compute effective commission rate, compare two program types side-by-side, and project break-even sales to hit a target income. History (localStorage) + shareable URL. 100% client-side.
Affiliate Link Cloaker & Redirect Generator
Cloak affiliate links into pretty URLs and generate redirect scripts (PHP, JavaScript, HTML meta refresh), plus .htaccess, nginx, and robots.txt rules. CSV import of slug/affiliate_url pairs, slug auto-generator from hostname, click-tracking parameter builder, URL-shortener compatibility check, history (localStorage), shareable URL. 100% client-side.
Anchor Text Distribution Analyzer
Analyze anchor text distribution from backlink data. Categorize anchors as exact/partial match, branded, generic, naked URL, or image. Compute distribution %, warn on over-optimization, and export. 100% client-side.