Check SSL/TLS certificate status for any domain — HTTPS verification, security headers, HSTS, CT logs, and openssl command generation
Yes, PivaBox SSL Certificate Viewer is completely free to use. There are no charges, subscriptions, or hidden fees.
Web browsers do not expose the full X.509 certificate chain via JavaScript for security and privacy reasons. The Web Security API only reveals whether a connection is secure and basic protocol information. For full certificate details (issuer, expiry, SANs, public key), you need to use a command-line tool like openssl or an online service like SSL Labs.
The tool checks for 8 critical security headers: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, Expect-CT, and Cross-Origin-Opener-Policy. Each header is rated as pass (present and properly configured), warn (present but may need tuning), or fail (missing). A security score percentage is calculated based on how many headers are present.