Port 443: HTTPS Secure Web Traffic

What is Port 443?

Port 443 is the default port for HTTPS (HTTP Secure) traffic. It uses TLS (Transport Layer Security) to encrypt all data between the client and server, protecting against eavesdropping and tampering.

Why Use HTTPS?

• Encryption: All data is encrypted in transit
• Authentication: Certificates verify server identity
• Integrity: Data cannot be modified in transit
• SEO: Google ranks HTTPS sites higher
• Browser requirements: Many APIs require secure context

TLS Versions

Server Configuration

Nginx with Let's Encrypt

server {
    listen 443 ssl http2;
    server_name example.com;

    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
    ssl_prefer_server_ciphers off;

    # HSTS
    add_header Strict-Transport-Security "max-age=63072000" always;
}

Get a Free SSL Certificate

# Install certbot
sudo apt install certbot python3-certbot-nginx

# Get certificate
sudo certbot --nginx -d example.com -d www.example.com

# Auto-renewal is configured automatically
sudo certbot renew --dry-run

Troubleshooting

# Test SSL connection
openssl s_client -connect example.com:443

# Check certificate expiry
echo | openssl s_client -connect example.com:443 2>/dev/null | \
  openssl x509 -noout -dates

# Test TLS version support
openssl s_client -connect example.com:443 -tls1_3

# Check what's listening on 443
sudo lsof -i :443

Common Issues

• Certificate expired: Renew with certbot renew
• Mixed content: Resources loaded over HTTP on HTTPS page
• Port blocked: Check firewall allows 443/tcp
• Certificate mismatch: Wrong domain in certificate

How to Check if Port 443 is Open

Use these commands to verify HTTPS connectivity and inspect SSL/TLS certificates.

# From a remote machine — test connectivity
nc -zv example.com 443                 # Netcat
curl -vI https://example.com           # Verbose HTTPS headers
nmap -p 443 --script ssl-enum-ciphers example.com

# Test SSL/TLS connection and view certificate
openssl s_client -connect example.com:443

# Check certificate expiry date
echo | openssl s_client -connect example.com:443 2>/dev/null | \
  openssl x509 -noout -dates

# On the server — check what's listening
sudo ss -tlnp | grep :443
sudo lsof -i :443

# Check firewall rules
sudo ufw status | grep 443

HSTS and Security Headers

Once HTTPS is working on port 443, strengthen your security with these HTTP headers.

# Nginx security headers for HTTPS
server {
    listen 443 ssl http2;

    # HSTS — tell browsers to always use HTTPS
    add_header Strict-Transport-Security
      "max-age=63072000; includeSubDomains; preload" always;

    # Prevent clickjacking
    add_header X-Frame-Options "SAMEORIGIN" always;

    # Prevent MIME type sniffing
    add_header X-Content-Type-Options "nosniff" always;

    # Content Security Policy
    add_header Content-Security-Policy
      "default-src 'self'; script-src 'self'" always;
}

Monitoring HTTPS with UptimeSignal

An expired SSL certificate on port 443 causes browsers to show a security warning, driving away visitors. UptimeSignal monitors your HTTPS endpoints and alerts you before certificates expire. Use our free SSL Checker to inspect your current certificate. Pair it with monitoring on port 80 to ensure your HTTP-to-HTTPS redirect is working.

Frequently Asked Questions