HTTPS encrypts traffic between a browser and the server and authenticates the domain through a certificate. It protects data in transit; it does not prove that a business is trustworthy or remove malware. Check certificate coverage, redirects, mixed content and automated renewal.
What to check
- Check the main domain and www coverage.
- Test renewal and expiry alerts.
- Check HTTPS redirects and assets loaded over HTTP.