Skip to the content

Security headers check

The certificate is valid for the host

The TLS handshake succeeds, so the chain is trusted and the hostname matches.

high severitysec.tls-certificate

Run this check on your site

Runs just this check in quick mode. The report opens with the evidence and the fix.

Why it matters

A browser that cannot verify the certificate shows a full page warning, and every link on the site becomes a risk to click.

How to fix it

Serve the site with a certificate that covers the hostname and chains to a trusted root. Renew it before it expires.

The details

Category
Security headers
Severity of a failure
high
Confidence
medium
Needs a browser
No
Check id
sec.tls-certificate

References

Free tools that run this check

↑ ↓ to move↵ to openesc to close