SSL Analysis & Certificate Guide
Examine your site's SSL certificate in depth; if something is wrong, find out exactly why and how to fix it, step by step.
Mixed Content Scanner
When an HTTPS page contains a resource loaded over http:// (an image, a script, an iframe), the browser breaks the padlock and stops treating the page as fully secure. Let's scan your site and find those resources.
To see it for your own site, enter your domain above and press Analyse SSL.
Active mixed content
Scripts, iframes and stylesheets: they can take over the page, and browsers block most of them.
Passive mixed content
Images and media: they break the padlock but carry less risk.
Why it matters
A single http:// resource makes the whole page look 'not secure'.
The fix
Move every resource to https://, or use a protocol-relative (//) form.
Why Is Mixed Content a Problem?
Even with a flawless SSL certificate, a single http:// resource on your page breaks the chain. The browser says “part of this page is being sent unencrypted”; the padlock disappears or turns into a warning. Because active resources (scripts, iframes) can take over the entire page, modern browsers usually block them outright, which can break your site's functionality as well.
How Do You Fix It?
The cleanest fix is to move every resource address to https://. If a resource is served over both http and https, the protocol-relative (//) form can be used. For a bulk fix, adding the Content-Security-Policy: upgrade-insecure-requests header on the server tells the browser to upgrade http resources to https automatically; correcting the actual addresses is still the healthiest approach.
Want to see your site's full technical health? SSL is only the beginning; Turksemveri Web examines security, speed and SEO together across 90 checks.
Free SEO Analysis →