Security & HTTPS
The HTTPS certificate has expired or does not validate
One of the 136 checks Lala SEO runs on every page of a site in a free audit.
- How serious
- Serious. Can stop pages from appearing in Google, or from working for visitors. Fix these first.
- Based on
- Google's own documentation
What is wrong
Your website's HTTPS certificate has expired or no longer works properly. When a certificate expires, the secure connection between visitors' browsers and your site breaks. The browser shows a warning page, and Google's crawler cannot access your pages at all.
Why it costs you
This stops Google from indexing your site. Visitors see security warnings and will leave without visiting. Search results for your pages disappear. If your site sells anything or collects information from visitors, they won't trust an unencrypted connection and you'll lose revenue and data.
How to fix it
Renew your HTTPS certificate through your hosting provider or certificate authority. Most hosting control panels have a one-click renewal option. If you've already renewed it, clear your server's certificate cache or restart the web server so the new certificate loads. Check that the certificate covers all the domains and subdomains your site uses. You must do this within 7 days of expiry or visitors will see errors.
What the audit tests
- The HTTPS certificate has not expired and has more than 7 days left
- The HTTPS certificate chain is trusted, so browsers accept it
- The HTTPS certificate covers the site's own hostname
Check your site
Run a free audit of up to 300 pages. No card needed.
Start a free auditOr check a single address with the free tool.
Other security & https checks
- Any website can display this site inside a frame
- Browsers are not told to always use HTTPS
- Forms on secure pages send their contents over plain HTTP
- Pages served over HTTP
- Secure pages loading scripts or styles over plain HTTP
- The HTTPS certificate expires soon
- The nosniff security header is not sent