TLS & Cache Checker.Certificates and caching, one pass.
Certificate chain, TLS version and cache behaviour in one pass — including readiness for shortening certificate lifetimes.
TLS & Cache Checker in four questions.
Chain validity, expiries, issuer posture, and whether renewal automation is in place for the shortening-lifetime era.
Protocol versions and negotiation, is the edge serving TLS 1.3 to clients that speak it?
Repeat-request probes show real HIT/MISS behavior per asset class, not what the config file claims.
Lifetimes step down from March 2026; manual renewal processes stop being survivable. The checker grades your readiness.
How it works.
A transparent look at exactly what the tool checks, and how it reaches its answer.
The live connection reports whether the certificate chain verifies and which TLS version the edge negotiated for our request.
CoreEvery certificate in the chain checked for validity, expiry windows and known-problem issuers.
CoreCache-Control, Age and related headers on the response show whether content is cacheable and how long edges are told to hold it.
CoreTwo plain verdicts — is the certificate valid, and is the content cacheable — with the headers behind each, ready to copy or share.
CoreWhat you’ll get.
Every certificate, its validity and its renewal deadline.
IncludedWhat was negotiated at each attempted version.
IncludedHIT/MISS behavior per asset class, with honored TTLs.
IncludedA grade on whether your renewal operations survive 47-day certificates.
IncludedWho it’s for.
Certificate lifetimes begin shortening in March 2026; this is the readiness check.
Find the asset classes silently missing cache before the bandwidth bill does.
Chain and protocol posture, documented in a shareable report.
Prove the new edge negotiates and caches the way the old one did, or better.
Free to use. Live now in public beta.
The toolkit automates the detection and benchmark data behind the assessments we already run, the tools are how we prove the data is good.
Every tool ships free with shareable reports; the business model is the advisory behind it, not your email address.
Live now in public beta — free to run, refined as we expand coverage.
Want the answer before the tool exists? A free assessment runs the same analysis, human-graded, usually within 24 hours, and gives you a benchmark against pooled volume pricing.
TLS & Cache Checker in context.
The research this tool automates.
More free CDN World tools
All part of the same toolkit — passive, non-intrusive, no signup.
TLS & Cache Checker questions,
answered straight.
Is the checker live?
It’s live now in public beta in the CDN World toolkit — live now; the tools page are free to run with no signup.
What’s the 47-day certificate story?
The CA/Browser Forum has scheduled maximum certificate lifetimes to step down from today’s 398 days to 200 days in March 2026, then 100 days in 2027, reaching 47 days by March 2029. Manual renewal doesn’t survive that; the checker grades whether your automation will.
How does it test caching without my logs?
Sequenced repeat requests observe the edge’s actual HIT/MISS responses and honored TTLs per asset class, behavior, not configuration claims.
Will it flag weak ciphers?
Protocol and negotiation posture is in the launch scope, graded against current guidance rather than exhaustive cipher enumeration.
Is it safe to run against production?
Yes, it’s a handful of ordinary HTTPS requests, indistinguishable from a browser visit.
I need this checked today.
A free assessment covers TLS and cache posture, human-graded, usually within 24 hours.
All product names, logos and brands referenced in tool reports are the property of their respective owners and are used for identification purposes only. CDN World tools perform passive, non-intrusive analysis. Tool capabilities and launch timing described on this page are plans, not commitments, and may change.