testssl.sh

As indigodaddy mentioned the cert is only signed for www and not the apex. [1]. The alternate name should be one or the other www vs apex. To run a test similar to Qualys one could clone testssl.sh [2] and run against a local development version of the site. requires bash and openssl Some headers may be missing [3]. Follow the links from Qualys and SecurityHeaders to get more information on how to remediate the findings. It might also not hurt to open a ticket with Cloudflare to see what else is going on here if you have a paid account. [1] - https://www.ssllabs.com/ssltest/analyze.html?d=www.teamkenne... [2] - https://github.com/drwetter/testssl.sh [3] - https://securityheaders.com/?q=https%3A%2F%2Fwww.teamkennedy...

For which domain? joinpeertube.org or one of the video hosting nodes? Use Qualys [1] to test the domain in question to link here or use the testssl.sh [2] code only depends on openssl and bash to test from your machine. If one of the many self hosted nodes, see if you can find a way to reach out to them and kindly suggest they set up certbot or a cron job to renew their certs. Joinpeertube.org looks good to me [3] so I assume you find a self-hosted node that needs some attention. If someone here knows of a way to query a list of all the self-hosted domains joined into peertube perhaps we could run testssl.sh against all of them to generate reports. I am not opposed to doing this if someone knows how I can get a list of all the domains using curl. [1] - https://www.ssllabs.com/ssltest/ [2] - https://github.com/drwetter/testssl.sh [3] -