SSL/TLS & Website

Certificate name check

The certificate has to name the exact hostname a visitor types. If it names something else, browsers refuse it.

Check this on your own domain now. It is free with a DomainGuard account and works on any domain. The check reads only what your domain publishes, and gives you a report you can send to whoever runs your website.

What we look at

We compare the names on the certificate your site serves with the hostname we connected to. Our scanner reads this straight off your server, the way a browser does: every day for the domains DomainGuard watches on Starter and up, and whenever you press Scan now on a domain in your account. The quick tools on this site cannot read a certificate themselves. For a domain in your account they show our scanner's last reading; for any other domain they show whether HTTPS works but not this row.

Why it matters to your business

This usually happens after a site moves, or when www and the bare domain are set up differently. Visitors who type the "other" version get a warning page, and many never try again.

How to fix it

  1. Issue a certificate that covers both yourdomain and www.yourdomain.
  2. A wildcard (*.yourdomain) covers one level of subdomain only, and does not cover yourdomain itself.

If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.

Check your own site for this

A free outside-in check of your website, email and domain records, with what to fix first. No card and no password to choose.

Free, no card, no password to choose: your name and email make a free DomainGuard account that keeps the report, and we email you a link to confirm it. We only read what the internet can already see.

Keep an eye on it

A one-off check tells you how things stand today. On Starter and up, DomainGuard re-checks the domains it watches every day and alerts you in the app when something important changes, so you hear about it before a customer does.