Practical Security Guides For Your Team

Your website is using a security certificate that you issued yourself, rather than one verified by a trusted third party. Think of it like a business putting up its own 'health and safety approved' sign instead of getting an official inspection — visitors and browsers have no way to confirm the certificate is genuine. Modern browsers will show a security warning to anyone who visits, which can drive customers away.

Your website's security certificate has expired. This certificate is what tells browsers your site is safe and keeps data encrypted between your site and your visitors. Right now, anyone visiting your site is likely seeing a full-screen warning saying 'Your connection is not private' — and most people will leave immediately rather than click through.

Your server still supports TLS 1.0, an old encryption standard from 1999 that has a known weakness called BEAST. Think of it like a lock on your front door that was recalled years ago — it still works most of the time, but security experts have shown it can be picked under the right conditions. Modern browsers and servers have largely worked around this flaw on their end, but the safest fix is to retire the old protocol on your server entirely.