TentyHTTPS and certificates
HTTPS protects every request between your visitor and your site, and a valid certificate is what makes browsers trust it.
What it is
The check covers the address itself (does the site answer over https, does plain http redirect), the certificate (valid, trusted, how long it lasts, which names it lists), the TLS version, and parts of a secure page that load over plain http.
Why it matters
Without https, anyone on the same network can read and change what a visitor sees. An expired or untrusted certificate puts a full page warning in front of the site, and most visitors leave. A certificate that lists staging or internal names tells attackers which hosts exist. Tenty rates an expired certificate critical, one that ends within 7 days high and within 14 days medium.
How Tenty checks it
Tenty opens a TLS connection to your host, reads the certificate and the protocol version, asks the plain http address where it leads, and scans the page for http resources. Every scan includes it.
How to fix it
- No https or no redirect: turn on https at your host and redirect http to https.
- Expiring certificate: renew it and switch on automatic renewal. Hosts such as Vercel, Netlify and Cloudflare do this for you.
- Old protocol: allow TLS 1.2 and 1.3 only.
- Internal names in the certificate: issue a separate certificate for staging hosts.
- Mixed content: change
http://resources tohttps://.
How to reproduce
curl -sSI 'http://YOUR-APP/'
openssl s_client -connect YOUR-APP:443 -servername YOUR-APP </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -datesThe first line shows whether http redirects. The second shows the certificate dates.