Security guide
Security certificate (HTTPS)
If your certificate is missing or invalid, browsers show your visitors a “Not secure” or “Your connection is not private” warning, and many will leave before contacting you or buying.
Who can help
Your web host or web developer
Inspect before changing
Use these steps for a website or email domain you manage. Complete the capitalized placeholders with your own values. If a step refers to saved evidence, run the free check and verify your domain to open the private report. Use the exact hostname or DNS query name shown there.
- In your browser, click the padlock next to the exact saved address and open the certificate details. Compare the name, issuer and validity dates with your hosting dashboard. If you use a CDN such as Cloudflare, its certificate and your host’s certificate may be managed by different people.
Hostname: YOUR_HOSTNAME
Certificate owner: CONFIRM_EDGE_OR_ORIGIN
Hostname covered: VERIFY
Chain and validity: VERIFY
What to do
Ask your web host to install a valid certificate that covers this exact web address; most hosts offer free certificates that renew automatically. If a service such as Cloudflare sits in front of your site, check its certificate settings too. Keep the current working setup until the new certificate works, and never ask visitors to click through a browser warning.
How to verify the change
Open your website in a private browser window: it should load without a warning and show the padlock. Then run this check again: this item should show Good.
What this check can establish
We check one secure connection to your homepage. This is not a full audit of your encryption settings and does not certify your website.