SSL/TLS and certificate issues we check

The padlock in the address bar depends on your site's SSL/TLS configuration and certificates, and getting it wrong undermines the privacy and trust your visitors rely on. This is on the test list.

The tester examines things such as:

• Whether the certificate is valid, correctly issued and properly installed.
• Which protocols and ciphers are enabled, and whether any weak or obsolete ones remain.
• Whether connections could be downgraded or intercepted.
• Configuration that weakens the encrypted connection between your site and its visitors.

Weak TLS can expose data in transit, trigger browser warnings that scare off customers, or fail compliance requirements. The report sets out any certificate and configuration issues found and how to bring your encryption up to standard.