You see the padlock in the browser bar and relax. But that padlock only says the connection is encrypted, not that it is done well. When a tool assigns a grade to your certificate, it is summarizing several things at once. Let us translate them.
HTTPS is not a checkbox, it is a spectrum
HTTPS means the traffic between the user and your server travels encrypted with TLS, so nobody in the middle can read or alter it. So far so good. But there are good and bad ways to do it, and that is where quality comes in.
The TLS version matters
TLS has evolved. Old versions (TLS 1.0 and 1.1) have known weaknesses and are officially retired. The healthy setup today is to serve TLS 1.2 and TLS 1.3 and disable the old ones. If your server still accepts old protocols for compatibility, you are lowering the bar for everyone.
Expiry: the silliest and most common failure
Certificates expire, often every 90 days. When one lapses, the browser shows a red warning screen and your users flee. Most platforms renew automatically, but if you use a custom domain or an unusual proxy, keep an eye on the date. It is the kind of failure that stays quiet until the day it breaks.
What else a good grade looks at
- That the certificate chain is complete and the browser trusts the issuer.
- That the certificate covers the correct domain (including
wwwif you use it). - That the offered ciphers are modern and include no broken algorithms.
- That you truly redirect from
httptohttps, leaving no doors open.
Why it matters even for a small app
Weak TLS is not only a security risk: browsers penalize it, some services refuse the connection, and it looks bad. And if you handle logins or payments, it is simply non-negotiable.
Check your TLS with Scanaris
Scanaris runs a read-only review of your HTTPS quality: accepted TLS versions, certificate validity and expiry, and whether your HTTPS redirect is set up correctly. All from public information, without touching your server. If something is off, it explains it and gives you a fix prompt. Scan your site and finally understand what sits behind your padlock.