HTTPS Migration Tool
Migration checklist
All the important steps for a successful HTTPS migration.
301 Redirect Generator
Generate the redirect code for your server.
Apache (.htaccess)
Nginx (server block)
IIS (web.config)
PHP (header)
Check SSL certificate
Generate direct analysis links for your domain.
HTTP → HTTPS URL converter
Paste text, code or SQL dumps. All HTTP URLs will be safely converted.
Mixed Content Analysis
Paste HTML code to find unencrypted resources (images, scripts, CSS).
Warte auf Eingabe...
Security Headers Generator
Recommended HTTP security headers for maximum protection (A+ rating).
Warning: HSTS forces browsers to use HTTPS. Make sure your certificate is valid!
Apache (.htaccess)
<IfModule mod_headers.c>
# HSTS - Zwingt HTTPS für 1 Jahr
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# Verhindert Clickjacking
Header always set X-Frame-Options "SAMEORIGIN"
# Verhindert MIME-Sniffing
Header always set X-Content-Type-Options "nosniff"
# Referrer Information minimieren
Header always set Referrer-Policy "strict-origin-when-cross-origin"
# Permissions Policy (optional)
Header always set Permissions-Policy "geolocation=(), microphone=(), camera=()"
</IfModule>
Nginx
# HSTS add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; # Security Headers add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
CSR (Certificate Signing Request) Generator
Generate the OpenSSL command for your new certificate.
OpenSSL Befehl
openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
Recommended tools
The best free tools for webmasters.
Die führende kostenlose, automatisierte und offene Zertifizierungsstelle.
Automatisierter Client zum Beziehen und Erneuern von Let's Encrypt Zertifikaten.
Schneller und einfacher Check der Zertifikats-Kette (Chain of Trust).
Trage deine Domain ein, um HTTPS direkt im Browser hardcodiert zu erzwingen.