Basic indicators

The audit checks whether a certificate exists, validity dates, issuer and general HTTPS signals.

A valid certificate does not guarantee the whole app is secure, but it is a minimum baseline for internet operation.

Common risks

Forgotten expirations, certificates for another domain, incomplete chains or mixed HTTP/HTTPS configurations cause visible user errors.