TLS & Cache CheckerFREE

TLS & Cache Checker.
Certificates and caching, one pass.

Certificate chain, TLS version and cache behaviour in one pass — including readiness for shortening certificate lifetimes.

AT A GLANCE
Livepart of the first waveFreeno signup required47-daycert-era readiness checkTLS 1.3protocol & cipher postureHIT/MISSreal cache behavior probesLiveand free to run

Part of the CDN World toolkit · live and free to run

Certificate ofTransport Security

This certifies that example.com was inspected for its certificate chain, protocol and cache behaviour.

  1. Certificate & TLS status
  2. Chain validation
  3. Cache-header analysis
  4. Clear pass/fail verdict
ProtocolTLS 1.3Valid for89 daysSignedCDN World
Example certificate
TLSCache
HIT

TLS and caching are two of the biggest levers on speed and cost. A free assessment reviews the whole delivery path.
The report

What you’ll get.

THE OUTPUTInside the report
Chain & expiry mapIncluded

Every certificate, its validity and its renewal deadline.

Protocol matrixIncluded

What was negotiated at each attempted version.

Cache verdictsIncluded

HIT/MISS behavior per asset class, with honored TTLs.

Shortening-lifetime readinessIncluded

A grade on whether your renewal operations survive 47-day certificates.

Freeto use, forever

No signuprequired to run it

Shareableevidence-backed reports

Live nowand free to run

What it answers

TLS & Cache Checker in four questions.

Is the certificate estate healthy

Chain validity, expiries, issuer posture, and whether renewal automation is in place for the shortening-lifetime era.

Is the TLS configuration modern

Protocol versions and negotiation, is the edge serving TLS 1.3 to clients that speak it?

Is caching actually happening

Repeat-request probes show real HIT/MISS behavior per asset class, not what the config file claims.

Are you ready for 47-day certificates

Lifetimes step down from March 2026; manual renewal processes stop being survivable. The checker grades your readiness.

Under the hood

How it works.

A transparent look at exactly what the tool checks, and how it reaches its answer.

DETECTIONHow it works
  1. 01Core

    Certificate & TLS status

    · verified connection

    The live connection reports whether the certificate chain verifies and which TLS version the edge negotiated for our request.

  2. 02Core

    Chain validation

    · trust & expiry

    Every certificate in the chain checked for validity, expiry windows and known-problem issuers.

  3. 03Core

    Cache-header analysis

    · how caches will treat it

    Cache-Control, Age and related headers on the response show whether content is cacheable and how long edges are told to hold it.

  4. 04Core

    Clear pass/fail verdict

    · at a glance

    Two plain verdicts — is the certificate valid, and is the content cacheable — with the headers behind each, ready to copy or share.

Use cases

Who it’s for.

Teams facing the 2026 step-down

Certificate lifetimes begin shortening in March 2026; this is the readiness check.

Cache-hit tuning

Find the asset classes silently missing cache before the bandwidth bill does.

Compliance checks

Chain and protocol posture, documented in a shareable report.

Migration verification

Prove the new edge negotiates and caches the way the old one did, or better.

Status & early access

Free to use. Live now, free to run.

STATUSWhere the build stands
FREE
Freeto use, no signup
Liveand free to run
200+assessments/yr behind the data
Liveand free to run
  • Built on assessment data

    The toolkit automates the detection and benchmark data behind the assessments we already run, the tools are how we prove the data is good.

  • Free, no signup, shareable

    Every tool ships free with shareable reports; the business model is the advisory behind it, not your email address.

  • Available now

    Live now and free to run, refined as we expand coverage.

LIVE NOWRun a lookup →

Want a human read on the result? A free assessment runs the same analysis, human-graded, usually within 24 hours, and gives you a benchmark against pooled volume pricing.

Live now · free to run, no signup
Keep reading

TLS & Cache Checker in context.

The research this tool automates.

TLS 1.3 and 0-RTT at the edge→OCSP stapling and certificate chains→Cache-hit ratio, the metric→Stale-while-revalidate, in depth→

More free CDN World tools

All part of the same toolkit — passive, non-intrusive, no signup.

CDN Finder FreeSee which CDN (or stack) serves any siteDNS Finder FreeIdentify the DNS provider and audit recordsHTTP Header Analyzer FreeGrade security headers and inspect cachingWAF Detector FreeDetect the web application firewall in useBot Detection FreeDetect the bot-management / anti-bot vendor
Want the full picture?

A free assessment reviews your whole delivery and security posture, human-graded.

Get a free infrastructure assessment ↗
FAQ

TLS & Cache Checker questions,
answered straight.

Is the checker live?

It’s live and free to run in the CDN World toolkit — as is everything on the tools page.

What’s the 47-day certificate story?

The CA/Browser Forum has scheduled maximum certificate lifetimes to step down from today’s 398 days to 200 days in March 2026, then 100 days in 2027, reaching 47 days by March 2029. Manual renewal doesn’t survive that; the checker grades whether your automation will.

How does it test caching without my logs?

Sequenced repeat requests observe the edge’s actual HIT/MISS responses and honored TTLs per asset class, behavior, not configuration claims.

Will it flag weak ciphers?

Protocol and negotiation posture is in the launch scope, graded against current guidance rather than exhaustive cipher enumeration.

Is it safe to run against production?

Yes, it’s a handful of ordinary HTTPS requests, indistinguishable from a browser visit.

I need this checked today.

A free assessment covers TLS and cache posture, human-graded, usually within 24 hours.