Certificate invalid

Why it matters

Visitors get a full-page warning before they even see your site, and most of them leave. Forms, logins and payments stop working for many of them.

How Snaglist checks it

This is part of the security check, a separate check next to the crawl, in Studio and Bureau, and only on a site you have verified. Snaglist only looks at what any visitor can see from outside. It never logs in, guesses no passwords and sends no attacks. It opens a secure connection to your site and checks the certificate the server shows: the name, the end date and the chain up to a trusted issuer.

Common causes

• Automatic renewal stopped working
• The certificate only covers the address with www, or only without
• The site moved to another server without a new certificate
• An intermediate certificate is missing on the server

How to fix it

1. Request a new certificate at the host. Let's Encrypt is free.
2. Include the domain with and without www.
3. Switch on automatic renewal.
4. Run the security check again to confirm.

How it shows in the report

In the report for your client this appears under the heading "The security certificate is not right". When everything is in order, the report says: "The security certificate is valid".