How to Migrate from HTTP to HTTPS
HTTP to HTTPS migration: (1) get SSL certificate via certbot (free); (2) configure nginx/Apache for HTTPS + TLS 1.2/1.3; (3) add 301 redirect from all http:// to https://; (4) fix Mixed Content (replace http links with https); (5) enable HSTS + submit to hstspreload.org.
Step-by-step guide
- Get SSL certificate.
sudo certbot --nginx -d example.com -d www.example.com. Free from Let's Encrypt. - Configure HTTPS in web server. nginx: 443 server block with
ssl_certificate+ssl_protocols TLSv1.2 TLSv1.3; - 301 redirect from HTTP to HTTPS. Separate 80 server block:
return 301 https://$host$request_uri; - Fix Mixed Content. Replace all
http://links withhttps://or//(protocol-relative). Check via /en/mixed-content. - Update canonical and sitemap. In sitemap.xml and <link rel="canonical"> — only https URLs.
- Enable HSTS.
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; - Submit to hstspreload.org. To be added to Chrome's preload list. Protection against downgrade on first visit.
- Google Search Console. Add the HTTPS version as a separate property. Confirm 301 redirects from HTTP.
Why teams trust us
How it works
Enter domain
TLS chain verified
Expiry date & vulnerabilities
What Does the SSL Check Cover?
SSL/TLS is the encryption protocol that protects data between the browser and server. Our tool analyzes the certificate, chain of trust, TLS version, and knownvulnerabilities.
Certificate Details
Issuer, validity period, signature algorithm, covered domains (SAN), and validation type (DV/OV/EV).
Chain of Trust
Full chain verification: from leaf certificate through intermediates to root CA.
TLS Analysis
Protocol version (TLS 1.2/1.3), cipher suites, Perfect Forward Secrecy (PFS) support.
Expiry Alerts
Set up a monitor — get Telegram and email alerts 30/14/7 days before expiration.
DV vs OV vs EV Certificates
- Confirms domain ownership only
- Issued in minutes automatically
- Free via Let's Encrypt
- Suitable for most websites
- Most common certificate type
- Organization (OV) or Extended Validation (EV)
- Issued in 1-5 business days
- Costs $50 to $500/year
- For finance, e-commerce, government sites
- Increases user trust
Who uses this
DevOps
SSL certificate monitoring
Security
TLS config audit
SEO
HTTPS as ranking factor
E-commerce
customer trust
Common Mistakes
www and subdomains.Best Practices
Strict-Transport-Security header forces browsers to always use HTTPS.Get more with a free account
SSL certificate monitoring, check history and alerts 30 days before expiry.
Sign up freeLearn more
How-to
Frequently Asked Questions
Signup required?
No for quick check. For continuous monitoring — free account.