Every secure HTTPS website presents a certificate that identifies the site and helps encrypt the connection. Browsers let you inspect a site certificate from the address bar, and they also provide access to the wider certificate stores your browser or operating system trusts.
Does this affect you?
Use this for Chrome, Edge, Firefox, and Safari on Windows or Mac when you need to check a site certificate, troubleshoot a certificate warning, or manage a certificate for work VPNs, home servers, or internal tools. Chrome and Edge use the operating system certificate store; Firefox maintains its own.
View the certificate for the site you are on
This works from the security icon in the address bar.
- Open the HTTPS website you want to inspect.
- Click the padlock or security icon to the left of the web address.
- In Chrome or Edge, open Connection is secure, then choose Certificate is valid to see issuer, expiration, and subject details.
- In Firefox, click the arrow or security details for the site, then open the certificate view.
- In Safari, click the padlock and choose Show Certificate from the popover.
Open the full certificate store
Use this when you need to view or manage all trusted certificates, not just one site.
- Chrome and Edge on Windows: Press the Windows key, type certmgr.msc, and press Enter. Windows Certificate Manager opens with folders such as Trusted Root Certification Authorities and Personal.
- Chrome and Edge on Mac: Open Keychain Access with Spotlight by pressing Cmd+Space and typing Keychain Access. Select Certificates in the sidebar.
- Firefox on Windows or Mac: Open Firefox Settings > Privacy & Security, scroll to Certificates, and click View Certificates. Firefox uses this separate certificate store rather than the Windows or Mac system store.
More control
Internal certificates are common at work or in a home lab
Company tools, VPNs, development servers, and self-hosted services may use certificates that are not trusted publicly. An administrator, or you for your own server, may install a trusted certificate into the same certificate store so the browser accepts the connection.
Treat certificate warnings seriously
Warnings about an expired certificate, wrong domain name, or untrusted issuer usually mean the browser is protecting you. Do not click through unless you specifically expected the warning and understand why it appears, such as a known internal tool with a self-issued certificate.
Firefox may need separate setup
Because Firefox does not automatically rely on the Windows or Mac certificate store in the same way Chrome and Edge do, a corporate certificate that fixes Chrome or Edge may still need to be imported in Firefox.
Certificates are not passwords
Certificates prove identity and protect the connection. They do not store your login credentials for the site. Passwords are managed separately in the browser or password manager.
Sources
- Google Chrome Help – Understand security icons (2025)
- Mozilla Support – Certificates (2025)
- Microsoft Learn – Manage certificates in Windows (2025)