HTTPS Readiness test

Input

Check here if your site complies with the HTTPS best practices

Domain analysis: www.standard.co.uk

  • Always redirect to same domain https://www.standard.co.uk (BEST PRACTICE!)
  • IP address: 151.101.37.91
  • Certificate details

  • Certificate validity period: 1 year(s) > 1 year -- will be refixed by Apple Safari browsers
  • This wildcard SSL Certificate was created for *.standard.co.uk and is also valid for www.standard.co.uk
  • Certificate issued by GlobalSign nv-sa, of type GlobalSign Atlas R3 DV TLS CA 2022 Q1
  • Certificate start date: Feb 4 18:45:38 2022 GMT
  • Certificate expiration: Mar 8 18:45:37 2023 GMT (in 210 days)
  • Encryption algorithm: TLSv1.3 / TLS_AES_256_GCM_SHA384
  • More certificate details?
  • SSL Labs: get more detailed HTTPS report
  • Mozilla Observatory: get more detailed HTTPS report
  • HTTPS Headers

  • Missing HTTP header x-xss-protection - should be 1; mode=block
  • Missing HTTP header x-frame-options - should be SAMEORIGIN
  • Missing HTTP header content-security-policy - create at least a minimal one
  • HTTP header strict-transport-security (HSTS) is OK (24 months valid)
  • For a GDPR-focused review of your domain, use Churlie GDPR Checkup
  • Content details

  • No mixed content: no http files used in the https page
  • How to get https for your site

    References