Trust checks: certificate, blocklists and domain renewal
The Trust page checks three things that make browsers and customers trust your store: its security certificate, whether a security service has flagged it as unsafe, and when your domain needs renewing. If one fails, customers can see a "Not secure" or red warning page instead of your store, or your store can go offline. Recon checks all three on every scan and shows you what to do.
Open the Trust page
- In Recon, open Trust.
Rows with a problem come first. Each one has a sentence that says what is wrong and a link to the fix. The checks run every week on Free and every day on Pro. See the Recon app listing to compare plans.
What each check means
| Row | What it checks | States |
|---|---|---|
| Security certificate | The certificate that gives your store the padlock and the https address. If it lapses, browsers show customers a full-page warning. | Valid, Expiring, or Not valid |
| Blocklists | Whether security services list your store as dangerous. Recon checks Google Safe Browsing, SURBL and URLhaus. | Not listed, or Listed |
| Domain renewal | When your domain registration runs out. If it lapses, your store goes offline and someone else can buy the name. | Not due, or Expiring |
The badge on each row says how urgent it is:
- No problems: nothing to do. The Domain renewal row also shows the renewal date.
- Worth a look: act soon. For Domain renewal, this means your domain expires in fewer than 30 days.
- Needs a fix: act now. A blocklist listing, a certificate that is not valid, or a domain that expires in fewer than 7 days.
- Checking your fix: you said you fixed it. Recon checks again on the next scan.
Fix your security certificate
Shopify gives your domain its certificate for free, as long as the domain is connected to your store. When the certificate breaks, the connection usually has broken too.
- On the Security certificate row, click Show me how.
- In the Fix your security certificate window, click Open domain settings.
- In Shopify, find your domain and check that it says Connected. If it does not, follow Shopify’s steps to reconnect it.
- Back in Recon, click I’ve checked it.
The row shows Checking your fix. Recon confirms the certificate on the next scan.
Renew your domain
- On the Domain renewal row, click Review renewal.
- The Renew {domain} window opens. If Recon knows your domain company, click Open {company}, for example Open GoDaddy. Otherwise, renew it where you bought it.
- Renew the domain, and turn on auto-renew so it cannot lapse again.
- Back in Recon, click I’ve renewed it.
The row shows Checking your fix. Recon reads the new renewal date on the next scan.
Get your store off a blocklist
- On the Blocklists row, click Show me how.
- The Get your store off the blocklist window lists each service that flagged your store. Click its name to open its review request page.
- Before you ask for a review, make sure nothing harmful is on your store, such as an app or script you do not recognise.
- Send the review request on the service’s page.
- Back in Recon, click I’ve requested a review, then Done.
Each service decides on its own review, and it can take a few days. Recon checks the lists again on every scan and shows No problems once your store is no longer listed.
If your store only has a myshopify.com address
The Trust page shows Connect your own domain first. Shopify owns the myshopify.com domain, so Recon cannot check its certificate, blocklists or renewal date for you.
Click Connect a domain to add your own domain in Shopify. Recon checks it on the next scan.
Related articles
- Email checks: stop others sending email as your store: the other set of checks on your domain.
- Alerts and summary emails: how Recon tells you when a check starts failing.
- Recon Free and Pro plans: how often each plan checks.