websiterebuildStart a project

CHOOSE THE RIGHT FEATURES

How to check HTTPS when launching a business website

Website Rebuild guides · Published · 2 min read

HTTPS setup is complete when visitors can open the intended domain securely and the page's resources also load correctly. A provider dashboard showing a certificate is one signal; test the public site too.

Confirm the intended hostnames

Decide whether the main address uses www. Record both versions and how the secondary version should redirect. Add the custom domain through the hosting provider's supported process and follow its DNS instructions. Cloudflare Pages documents a custom-domain setup rather than treating a DNS record alone as the entire configuration.

Open the real address

Visit the HTTPS address in a browser and look for certificate warnings. Check an inner page as well as the homepage. If there is a warning, diagnose the certificate or domain configuration; do not train customers to bypass it.

Inspect the loaded resources

Ask the developer to check for images, stylesheets or scripts still requested over HTTP. Mixed content can cause security or loading problems. GitHub's HTTPS guidance describes this issue, and the same resource check is useful when reviewing a site on other hosts.

Test redirects with a path

Open the secondary hostname with a real page path and a harmless test query. Check the final address retains the intended destination and query. Testing only the homepage can miss a rule that sends every request to the root or loses useful parameters.

Record the result

Keep the date, tested addresses and observed final URLs. Confirm who monitors certificate renewal and who responds if the domain stops working. Managed certificates reduce setup work but do not remove the need to watch the account and DNS configuration.

HTTPS protects traffic in transit; it does not prove a business is trustworthy or that every feature is secure. Treat certificate checks as one part of launch review, alongside account access, forms and content. Test again after changing DNS, hosting or custom-domain settings.

Sources and further detail

Technical references checked on 8 October 2026. Provider features can change.

Practical guidance with illustrative examples. Read our editorial standards or send a correction.

YOUR CHOICE

Essential storage keeps your privacy choices on this device. Optional analytics and advertising are currently not installed.

Read our cookie policy