HTTPS Security Checker
Check security headers and TLS configuration
How to use HTTPS Security Checker
- 1Enter the hostname or full URL you want to test over HTTPS.
- 2Enter the port if it is not the default 443.
- 3Read the certificate validity, chain completeness and protocol grade.
Checking HTTPS health
grade = f(cipherSuites, certExpiry, chainComplete, HSTS)HTTPS health combines a valid certificate, a complete trust chain, modern ciphers and HSTS; any gap can trigger browser warnings or downgrade attacks.
Expired or mismatched certificates are the most common cause of 'not secure' banners and lost user trust at checkout.
Frequently asked questions
What is HSTS and why enable it?
HSTS forces HTTPS and blocks SSL-strip downgrade attacks after the first visit.
What breaks the trust chain?
A missing intermediate certificate on the server, so the browser cannot link leaf to root.
How early renew certificates?
Automate via ACME (Let's Encrypt) with renewal 30 days before expiry to avoid outages.