The certificate is valid. The padlock is missing.

Your site loads over HTTPS with a valid TLS certificate, yet your browser shows no padlock. The problem is a single http:// subresource buried in your HTML. Httpfinder fetches your page server-side, finds every plain-http subresource, classifies it by how browsers treat it, and reports the exact line.

Enter an HTTPS URL. The tool fetches the page server-side and analyses the HTML for mixed content.

Disclosure

Cloudflare-fronted hosts (example.com, cloudflare.com, 1.1.1.1) cannot be reached by the server. These hosts report as unreachable.
Pages larger than 1 MB are truncated before parsing. Truncated results include a flag.
The scanner uses pattern matching on HTML — it may miss dynamically injected resources or CSS url() references.

See pricing for additional capabilities.