Why No Padlock: mixed content checker
A valid SSL certificate is only half the job. If one image, script or font still loads over plain http, browsers hide the padlock. Paste your page URL and we list every insecure resource so you can fix it in minutes.
Scan a page
Fix it fast
- WordPress
Settings, General: set both URLs to https. Then replace http://yourdomain with https://yourdomain in the database (Better Search Replace plugin), or install Really Simple SSL.
- Custom HTML
Change src and href values from http:// to https:// or use protocol-relative paths like /images/logo.png.
- Third party scripts
Chat widgets, ad tags and old CDN links sometimes only exist on http. Replace them with an https version or remove them.
- One line safety net
Add
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">in the head to auto-upgrade every http request on modern browsers.
What is mixed content?
How do I fix mixed content on WordPress?
Does this tool change my website?
Other free SSL tools
SSL Checker
Is my SSL installed correctly?
Open tool → CreateCSR Generator
Make a CSR and private key in your browser
Open tool → DecodeCSR Decoder
Read what is inside a CSR before ordering
Open tool → DecodeCertificate Decoder
See issuer, expiry and SANs of a .crt
Open tool → DecodeCertificate Key Matcher
Do this certificate, CSR and key belong together?
Open tool → CreateSSL Converter
PEM to PFX, DER, P7B and back
Open tool →Need a certificate to go with this tool?
Every SSL with a PKR price, the requirements listed, and a quotation in one click.