Free certificate and DNS check
Type a public domain name and see in seconds what a visitor, a mail server and an auditor would see.
Check a domain now
See the TLS certificate and the email and security records of any public domain in a few seconds. No account, nothing stored.
What is checked
- The TLS certificate on port 443: who issued it, when it expires, how many days are left, which protocol is used and whether it is trusted.
- Email protection: SPF, DMARC and whether DKIM selectors are in use.
- Certificate rules and signing: CAA records and DNSSEC.
- Mail and name servers (MX and NS), and a dangling CNAME that could allow a subdomain takeover.
What happens to your domain
The domain is used for this check only. Nothing is stored: no result, no history, no account. Your IP address is held in memory for up to an hour to limit how often one address can check, and is not written down.
The check runs from our server. It connects to the public site on port 443 and asks public DNS, so the owner of that domain may see a connection from us.
Limits
- Public domain names only. IP addresses, local names and private networks are refused.
- Port 443 only.
- A few checks per hour per address. Please do not automate it.
- It is a single look, not monitoring, and not legal advice or a NIS2 report.
After the check
A single look tells you how a domain is today. FullyQualified keeps checking, tells you when a certificate is about to expire or a record changes, and turns it into a report. Run it yourself or follow the hosted version.