Not verified
Certificate expiry date
Whether the certificate is close to expiring. A normal request proves the certificate is valid right now, and the runtime this check uses cannot read the expiry date from that request.
Needs the deployment
Why a check from outside cannot see it
A request proves the certificate is valid at the moment it is made. The date it stops being valid is inside the certificate itself, and the runtime this check runs on hands back the answer without handing back the certificate.
How to check it yourself
- 1Run openssl s_client -connect yourdomain.com:443 -servername yourdomain.com and read the notAfter date.
- 2Or open the padlock in your browser and read the same date there.
- 3Put a reminder in your calendar three weeks before it, even when renewal is automatic.
Run openssl s_client -connect yourdomain.com:443 -servername yourdomain.com and read the notAfter date, or open the padlock in your browser.
What a Launch Review does instead
Launch Review, $199
A reviewer reads the certificate directly, notes the expiry date, and checks that renewal is automatic and monitored.
See what a Launch Review coversIncidents that involved this
No incident in the library maps to this one yet.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026