HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Domain analysis: google.com

  • Redirect to insecure URL on sibling server www.google.com - check that server!
  • IP address: 172.217.23.206

    • Certificate details

  • This wildcard SSL Certificate was created for *.google.com and is also valid for google.com
  • Certificate issued by Google Trust Services LLC, of type GTS CA 1C3 (auto renewal)
  • Certificate start date: Mar 18 19:37:19 2024 GMT
  • Certificate expiration: Jun 10 19:37:18 2024 GMT (in 51 days)
  • Certificate validity period: 84 days (probably automated renewal)
  • Encryption algorithm: TLSv1.3 / TLS_AES_256_GCM_SHA384
    • More certificate details?
  • SSL Labs: get more detailed HTTPS report
  • Mozilla Observatory: get more detailed HTTPS report

    • HTTPS Headers

  • Missing HTTP header x-xss-protection - 1
  • Missing HTTP header content-security-policy - 1
  • Missing HTTP header strict-transport-security (HSTS)
  • HTTP header x-frame-options is OK - 1

    • Content details

  • No mixed content: no http files used in the https page

    • How to get https for your site

    References