certificate names and validity window
What it can report
- ! medium www.<apex> (or the apex, scanning www) resolves and answers on 443, but the certificate it presents is not valid for it. Not flagged when the name does not resolve or has no HTTPS listener (the headers group reports www/apex consistency). How to fix it
- ! low a publicly trusted leaf valid for longer than the CA/Browser Forum maximum in force on its notBefore (398 days from 2020-09-01, 200 from 2026-03-15, 100 from 2027-03-15, 47 from 2029-03-15). How to fix it
How it counts
The score is computed by fixed rules from the checks that ran, and this check has a weight of 2 within Security. A check that errors or is skipped is shown as "could not check" and left out of the score, never counted as a pass. Fixes and the AI summary are written after scoring and never change it.
Related checks
Scan your own domain and see this check run.