HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Domain analysis: www.giflorist.com.my

  • Always redirect to same domain https://www.giflorist.com.my (BEST PRACTICE!)
  • IP address: 23.227.38.74

    • Certificate details

  • This SSL Certificate was created especially for www.giflorist.com.my
  • Certificate issued by Let's Encrypt, of type R3 (auto renewal)
  • Certificate start date: Mar 10 07:06:32 2024 GMT
  • Certificate expiration: Jun 8 07:06:31 2024 GMT (in 49 days)
  • Certificate validity period: 90 days (probably automated renewal)
  • Encryption algorithm: TLSv1.3 / TLS_AES_256_GCM_SHA384
    • More certificate details?
  • SSL Labs: get more detailed HTTPS report
  • Mozilla Observatory: get more detailed HTTPS report

    • HTTPS Headers

  • HTTP header content-security-policy is wrong - 1
    block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
  • HTTP header x-xss-protection is OK - 1
  • HTTP header x-frame-options is OK - 1
  • HTTP header strict-transport-security (HSTS) is set but too short (only 3 months valid - should be at least 6)

    • Content details

  • No mixed content: no http files used in the https page

    • How to get https for your site

    References