HTTPS, SSL certificate and HSTS checker
Last updated
Enter a URL to check HTTPS end to end: the certificate, the redirect from http://, Strict-Transport-Security, old TLS 1.0 and 1.1, mixed http:// content and forms that post to insecure addresses. Each problem comes with the fix for your host.
Why HTTPS problems still happen
Hosts such as Vercel and Netlify handle certificates for you, but custom domains, old redirects, hard-coded http:// image or script URLs and forms copied from templates still cause mixed content and insecure submissions.
Questions
- Can I change the TLS version on Vercel or Netlify?
- No. Those platforms set the minimum TLS version themselves, so Defexity does not report it there.
Related Defexity checks
- SEC-001: Site is not served over HTTPS
- SEC-002: HTTP does not redirect to HTTPS
- SEC-003: TLS certificate problem
- SEC-004: Missing or weak Strict-Transport-Security header
- SEC-022: HTTPS page loads insecure http:// resources
- SEC-039: Old TLS 1.0 or 1.1 still accepted
- SEC-040: Form submits to an insecure http:// address
Defexity reports potential risks it can see from outside your app. It is not a guarantee of security and not legal advice.