# How to Check an SSL/TLS Certificate
An SSL/TLS certificate helps secure communication between a website and its visitors. Checking the certificate can help identify common configuration and security problems.
## 1. Check the Certificate
Open the website using `https://` and view the certificate information in your browser.
Check that the certificate is valid and trusted.
## 2. Check the Expiration Date
Make sure the certificate has not expired.
An expired certificate can cause browser security warnings and reduce user trust.
## 3. Check the Domain Name
The certificate should cover the website's domain name.
For example, a certificate issued for `example.com` should properly cover the domain being accessed.
## 4. Check the Certificate Issuer
Review which Certificate Authority (CA) issued the certificate.
The certificate should be issued by a trusted and properly recognized authority.
## 5. Check HTTPS
Make sure the website loads using HTTPS and does not unnecessarily allow sensitive information to be transmitted over HTTP.
## 6. Check for Browser Warnings
Pay attention to certificate warnings such as:
* Certificate expired
* Certificate not trusted
* Domain mismatch
* Invalid certificate chain
These warnings should be investigated.
## 7. Check TLS Configuration
Website owners should use modern TLS configurations and disable outdated or insecure protocols where appropriate.
## Use Cyber Recon Pro
Cyber Recon Pro can help authorized website owners and security professionals perform initial website security assessments and identify potential security issues.
Regular certificate and security checks can help keep websites safer and prevent avoidable HTTPS problems.
**Always test only websites and systems that you own or have explicit permission to assess.**