Certificates and supported protocol versions describe aspects of transport protection. They do not cover application authorization or stored data.
The following checks provide related public observations. Their presence does not mean this entire topic has been tested or that the application is secure.
Checks that the certificate is trusted, unexpired and issued for the scanned domain.
Renew the certificate and install the full chain. Most hosts can issue a free Let's Encrypt certificate automatically.
Flags certificates that expire within 14 days.
Renew the certificate now and enable automatic renewal.
Checks whether the server still accepts TLS 1.0 or 1.1.
Disable TLS 1.0 and 1.1 and allow only TLS 1.2 and 1.3.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology