Design DrifterHTTP Headers & TLS Checker
Inspect public HTTP response headers and HTTPS connection status.
DeveloperThis tool sends the URL you enter to our server, which fetches that public page on your behalf. No other data is sent.
The browser can confirm an HTTPS connection, but it cannot expose the remote certificate expiry date.
Files are processed in your browser and never uploaded.
About
Fetches a public URL from our server and reports its response status, redirect chain, HTTPS status and security-related headers such as HSTS, CSP and X-Frame-Options.
Fetch a public page and inspect its response status and headers, with a clear note about what browser-based TLS checks can and cannot expose.
What you can do
- Lists the public response headers.
- Shows status code and final URL after redirects.
- Identifies HTTPS usage without pretending to know certificate expiry.
Common uses
- Review security headers on a deployed page.
- Debug cache, content type, or redirect behavior.
- Confirm whether a public endpoint responds over HTTPS.
Frequently asked questions
Can it show certificate expiration?
No. Web page JavaScript cannot read a remote TLS certificate expiration date; use a dedicated certificate inspection service for that detail.
Are private URLs fetched?
No. Localhost, private IP ranges, and other internal addresses are blocked by the server endpoint.