Shared server guidance

HTTPS, certificates & HTTP

Verify TLS, diagnose redirects, inspect certificates, plan ACME renewal and test HTTPS origins safely.

10 practical answersClear prerequisites and verification
10 guides
HTTPS, certificates & HTTP

How do I inspect an HTTP redirect chain from PowerShell?

Inspect HTTP status codes and redirect destinations from Windows PowerShell with curl.exe, limit redirect loops and verify the final HTTPS URL.

Read the answer
HTTPS, certificates & HTTP

How do I verify the live TLS certificate served by a hostname?

Validate a live server certificate with OpenSSL using SNI, hostname verification and fatal verification errors, then interpret the result correctly.

Read the answer
HTTPS, certificates & HTTP

How do I inspect a certificate file and check whether it expires soon?

Read a PEM certificate’s subject, issuer, names and validity dates, then test an expiry threshold without displaying or changing its private key.

Read the answer
HTTPS, certificates & HTTP

How do I test an HTTPS origin server before changing DNS?

Test a chosen origin IP with curl --resolve while retaining the domain’s Host header, SNI and certificate validation before a DNS cutover.

Read the answer
HTTPS, certificates & HTTP

How do I check which certificates Certbot manages and whether renewal is scheduled?

Inspect Certbot-managed certificate names and expiry dates, then locate the existing renewal timer or scheduled job without creating duplicates.

Read the answer
HTTPS, certificates & HTTP

How do I test a Certbot renewal without replacing the live certificate?

Run a targeted Certbot renewal dry run, understand staging validation and hook effects, and diagnose failures before the live certificate expires.

Read the answer
HTTPS, certificates & HTTP

How do I obtain a certificate with Certbot’s webroot method?

Use Certbot webroot validation for an existing HTTP site, confirm the actual document root and obtain a certificate without automatic virtual-host edits.

Read the answer
HTTPS, certificates & HTTP

How do wildcard certificates and DNS-01 validation work?

Understand wildcard certificate scope, DNS-01 TXT validation and the requirements for reliable automated renewal with restricted DNS credentials.

Read the answer
HTTPS, certificates & HTTP

How do I diagnose a certificate verification failure without bypassing TLS checks?

Distinguish certificate hostname, expiry, intermediate-chain and trusted-CA problems with curl while keeping certificate verification enabled.

Read the answer
HTTPS, certificates & HTTP

How do I check whether a server sends a valid HSTS header?

Inspect Strict-Transport-Security over HTTPS and understand max-age and subdomain scope before changing a browser-enforced security policy.

Read the answer