iOS 5 and iOS 26 ship completely different root stores. So do Android 4.4 and Android 16. We verify your certificate chain against the real trust anchors of 78 platform versions — and tell you exactly where it breaks, why, and how to fix it.
Free, no account needed · 5 checks a day (10 with a free account) · nothing stored for anonymous checks
No domain handy? Open a sample report — real checks, frozen in time
Snapshots are instant. Prefer a live run? Check any domain yourself
Everything runs against real, version-pinned trust stores — not a generic "system" bundle.
We open a TLS handshake, pull your full chain — leaf, intermediates, cross-signs — and fingerprint every certificate. Prefer not to expose a hostname? Paste the PEM directly.
Each store is rebuilt from the vendor's official root list — Apple's published iOS trust stores, Android AOSP, LG webOS, Samsung Tizen, Amazon Fire OS. A chain that passes on iOS 26 but fails on iOS 9 is reported as exactly that.
Failures are grouped by root cause — "ISRG Root X1 is not in the iOS 9 trust store" — with the affected versions listed and a concrete fix, like which CA to switch to.
ISRG Root X1 was added in iOS 10 and Android 7.1. Older versions reject the chain.
Fix: serve the full chain, or re-issue via a CA rooted since the versions you need.
Graders tell you whether a certificate is configured well. We tell you whether the devices your users actually carry will accept it — version by version.
See a real report| SSL Labs | Platform Cert Check | |
|---|---|---|
| Per-version trust stores | — | 78 |
| iOS 5 → 26, Android 2.3 → 16 | Simulated partial | Real root stores |
| webOS / Tizen / Fire OS coverage | — | Yes |
| Failures grouped by root cause | Raw output | Yes |
| Apple Ask / Blocked trust levels | — | Yes |
| Expiry monitoring & re-check alerts | — | Pro |
| API for CI/CD gates | Yes | Yes |
Run a free check in under thirty seconds. Upgrade when you want monitoring, alerts and an API — $9 a month, cancel anytime.