HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Domain analysis: www.amazon.com

  • Always redirect to same domain https://www.amazon.com (BEST PRACTICE!)
  • IP address: 108.156.63.3

    • Certificate details

  • This SSL Certificate was created especially for www.amazon.com
  • Certificate issued by DigiCert Inc, of type DigiCert Global CA G2
  • Certificate start date: Jan 17 00:00:00 2023 GMT
  • Certificate expiration: Jan 16 23:59:59 2024 GMT (in 301 days)
  • Certificate validity period: 1 year(s) => commercial (paid) certificate
  • Encryption algorithm: TLSv1.3 / TLS_AES_128_GCM_SHA256
    • More certificate details?
  • SSL Labs: get more detailed HTTPS report
  • Mozilla Observatory: get more detailed HTTPS report

    • HTTPS Headers

  • HTTP header x-xss-protection is wrong - should be 1; mode=block
    1;
  • HTTP header content-security-policy is wrong - not a valid format - please check
    upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/
  • HTTP header x-frame-options is OK - iframe clickjacking protection
  • HTTP header strict-transport-security (HSTS) is OK (18 months valid)
  • For a GDPR-focused review of your domain, use Churlie GDPR Checkup

    • Content details

  • No mixed content: no http files used in the https page

    • How to get https for your site

    References