SSL certificate and HTTPS check

What is checked?

• Certificate subject, issuer, chain validation and expiry date
• TLS version and cipher suite
• HTTP/2 and HTTP/3 support and http to https redirection
• HSTS, CSP and other security headers

How do I read the result?

• Under 7 days to expiry is an error, under 30 days a warning.
• TLS 1.0 and 1.1 are outdated and count as errors.
• Missing security headers are usually an info note rather than a warning.

Frequently asked questions