SSL Chain of Trust Visualizer
See a website's full certificate chain, from its own certificate through every intermediate it presents, rendered as a diagram. Free, no account needed.
3 free checks per day. No signup needed.
How this reads the chain
This tool opens a real TLS connection and reads every certificate the server sends during the handshake, in order, the exact chain a browser would receive. Only the certificates the server actually presents are shown, most servers send the leaf plus one or two intermediates, and usually not the root, since browsers already have roots built in.
Frequently asked
What is a certificate chain?
A browser doesn't trust a site's certificate directly. It's signed by an intermediate CA, which is signed by a root CA already in the browser's trust store. The chain is that sequence of signatures.
Why do some sites send an incomplete chain?
A server should send its leaf plus every intermediate needed to reach a trusted root. If one is missing, some browsers complete it from a cache, others show a trust error, it's a common, easy-to-miss misconfiguration.
Related tools: SSL Certificate Checker ·HTTP Security Headers Checker