← All checks
SecurityTypical severity: High

TLS Certificate Scanner

Checks whether your site uses HTTPS and if its certificate is expired, expiring soon or uses old TLS.

What it checks

This scanner checks whether your site is served over HTTPS and examines the state of its TLS certificate. It detects certificates that are expired, expiring soon or relying on outdated TLS versions. This is the foundation for the browser padlock being real and trustworthy.

Why it matters

An expired certificate makes the browser show a big security warning that scares visitors away and breaks trust. Using old TLS versions leaves the connection vulnerable to attacks and poorly protected data in transit. On top of that, HTTPS is a factor search engines reward.

How to fix it

Renew the certificate before it expires, ideally with automatic renewal like Let's Encrypt or your host provides. Make sure the server only allows modern TLS versions (1.2 and 1.3). Most platforms manage the certificate for you once you enable HTTPS in the dashboard.

Check it on your site

Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.

Scan my site free

From the blog

Related checks