Test a X509 / SSL server certificate online

On your certificate status page at TBS INTERNET, you will find a button "Test installation" to test the correct installation of your certificate. The tool connects, by default, to your site in HTTPS, establishes an SSL session and analyzes the result.

You can also use our tool on other protocols (SMTPs, HTTPs, IMAPs, POPs, ...).

Our COpiBOT is also freely available on this page.

Of course your server has to be on and reachable from the internet!

SSL connection possible errors

Consult our online documentation to install your SSL certificate correctly

• testssl: return code = 0
• testssl: return code = 2 : UNABLE TO GET ISSUER CERT
• testssl: return code = 4 : UNABLE TO DECRYPT CERT SIGNATURE
• testssl: return code = 6 : UNABLE TO DECODE ISSUER PUBLIC KEY
• testssl: return code = 7 : CERT SIGNATURE FAILURE
• testssl: return code = 9 : CERT NOT YET VALID
• testssl: return code = 10 : CERT HAS EXPIRED
• testssl: return code = 13 : ERROR IN CERT NOT BEFORE FIELD
• testssl: return code = 14 : ERROR IN CERT NOT AFTER FIELD
• testssl: return code = 18 : DEPTH ZERO SELF SIGNED CERT
• testssl: return code = 19 : SELF SIGNED CERT IN CHAIN
• testssl: return code = 20 : UNABLE TO GET ISSUER CERT LOCALLY
• testssl: return code = 21 : UNABLE TO VERIFY LEAF SIGNATURE
• testssl: return code = 23 : CERT REVOKED
• testssl: return code = 24 : INVALID CA
• testssl: return code = 25 : PATH LENGTH EXCEEDED
• testssl: return code = 26 : INVALID PURPOSE
• testssl: return code = 27 : CERT UNTRUSTED
• testssl: return code = 28 : CERT REJECTED
• testssl: return code = 29 : SUBJECT ISSUER MISMATCH
• testssl: return code = 30 : AKID SKID MISMATCH
• testssl: return code = 31 : AKID ISSUER SERIAL MISMATCH
• testssl: return code = 32 : KEYUSAGE NO CERTSIGN
• testssl: return code = 33 : BAD SERIALS
• testssl: return code = 35 : DEBIAN FAIL
• testssl: return code = 37 : BAD CN
• testssl: return code = 39 : CERT REVOKED OCSP
• testssl: return code = 40 : LOW CIPHER
• testssl: return code = 41 : DOMAIN VALIDATED
• testssl: return code = 42 : BAD SERIALS EXPIRED
• testssl: return code = 43 : NO_CERTIFICATE
• testssl: return code = 44 : SSL DISABLED
• testssl: return code = 45 : PORT OPEN NO SSL
• testssl: return code = 46 : ALERT HEARTBLEED - OpenSSL 1.0.1
• testssl: code retour = 47 : ALERT SSLv2 / SSLv3
• testssl: return code = 48 : CHAIN SIGNATURE NOT MATCHING CERT
• testssl: return code = xxx

Our CO-piBOT is an OpenSSL-based tool, a great SSL toolkit.

Consult our online documentation and get some help to install your SSL certificate on your server

Other error messages from browsers

• The identity of this website has been validated by xxx, but it does not have a public key certificate.
• Mozilla Firefox 37.0.1+: Secure connection failed
• HTTPS with triangle: site partially secured - other not-secured resources