CrawlOut connects to your server directly and inspects the live TLS certificate — expiry date, issuer, hostname match, chain of trust, and protocol — and tells you exactly what's wrong before your visitors or Google notice.
A few common questions about certificate expiry, trust chains and hostname matching.