Guest demo · Read-only access to Pingy’s own website reports. Monitor your website →
pingy.io
Healthy · The latest website check succeeded.
Last collected 16 minutes ago · Oct 30 21:44 UTC
What this means & how to fix it
What the evidence tells you
A certificate proves the server identity and enables encrypted connections. Expiry, hostname mismatch, or an incomplete chain can prevent visitors from connecting.
Suggested next steps
Review the hostname, expiry, and chain in this report. Check certificate renewal at your hosting or CDN provider, install the full chain, and recheck every serving endpoint after changes.
Evidence collected Oct 30, 2026 21:44 UTC. Current settings may have changed since this check.
SSL Certificate Health
Certificate is valid and securely configured.
Last checked 16 minutes ago
1. Certificate Overview
2. Certificate Chain
3 certs No missing intermediate3. Security Checks
🛡 Enabling HSTS
HSTS (HTTP Strict Transport Security) is a response header — Strict-Transport-Security — that tells browsers to load your site over HTTPS only. After the first visit, the browser refuses plain HTTP and upgrades every request to HTTPS on its own.
- Blocks protocol-downgrade and SSL-stripping man-in-the-middle attacks.
- Stops the insecure HTTP→HTTPS redirect hop (which is itself interceptable).
- With preload, browsers enforce HTTPS on the very first visit.
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
</IfModule>4. Protocols & Cipher
Legacy protocols (SSLv3–TLS 1.1) aren’t actively probed by the scanner. Full cipher & vulnerability scanning is on the roadmap.
5. Security & Policy Details
6. Grade Explanation
- •Trusted certificate, valid hostname, modern TLS.
- •Strong HSTS policy (≥180 days).