Audit rules
Invalid TLS Certificate
The TLS certificate of the https page failed validation (expired, wrong host or untrusted chain). In a QuikSEO audit, a failure of this rule has error severity and counts against the score. Below are the exact condition, its exceptions and the sources behind it, followed by the other rules of the same group.
http.tls_invalidError01 — Definition
How This Rule Is Checked
The rule is a pure function of the fetched page: no extra requests, no account settings. The same input always gives the same result.
Rule Severity and Score
- Rule id
http.tls_invalid- Group
- HTTP
- Severity of a failure
- Error
- Counts in the score
- Yes, whenever it applies to the page
- Required for a score
- No
- Replaces the check
is_ssl_valid
Condition and Exceptions
- Condition
- Probe tls (one verified handshake through the page fetch path: validated IP, admin proxy): handshake completed and verification failed (valid false) → fail
- Exceptions
- http page → not_applicable; no probe → not_checked; no handshake completed (timeout, connection or proxy failure, valid null) → not_checked
Sources and Project Decision
- Sources
- RFC 9110: HTTP Semantics, section 4.3.4 https Certificate Verification (IETF, Q79)
RFC 5280: Internet X.509 Public Key Infrastructure Certificate and CRL Profile, section 4.1.2.5 Validity (IETF, Q73) - Project decision
- Only a completed handshake whose certificate fails verification is a fail; a timeout or connection failure is not_checked.
02 — HTTP
Other Rules in This Group
The other checks of the same group, each with its own condition and sources.
- No Cache Validatorshttp.cache_validators
- HTML Not Compressedhttp.compression
- Page Answers With an Error Statushttp.error_status
- WWW and Non-WWW Both Serve the Pagehttp.host_variant_duplicate
- HTTP Protocol Versionhttp.http2
- HTTP Version Not Redirected to HTTPShttp.http_variant_not_redirected
- Page Not Served Over HTTPShttp.https
- Mixed Contenthttp.mixed_content
- X-Powered-By Version Disclosedhttp.powered_by
- Redirect Chainhttp.redirect_chain
- Server Version Disclosedhttp.server_header
- TLS Certificate Expiring Soonhttp.tls_expiring