Teardown · 27 August 2026

Anatomy of a 49

Five categories averaging 85, held at 49 by a single expired certificate nobody could see. Two fixes take it to 94.

Worked example
This is an illustration of the format, built from invented findings for a site that does not exist. It is not a real scan of a real company. Published teardowns carry a live report link instead of this notice.

49

Northfield Supply Co.Poor

https://northfield-supply.example

8 findings · held at this score by a critical finding

[critical] 1[high] 1[medium] 3[low] 3

The interesting thing about this scan is not the 49. It is that the five category scores average 85 — structural 87, SEO 68, performance 100, security 74, usability 100 — and the site still comes out at 49.

That gap is the whole point. One expired certificate caps the score, because a number that can say Good over a broken certificate is not worth reading. So the report holds it at 49 and says why.

Nothing here is on fire. The site loads, the pages render, the checkout works. Every finding below is something a person could have shipped this week without noticing.

The two that decide the score

Neither of them is visible in a browser.

The expired certificate on the CDN subdomain is what caps the scan. The main domain's certificate is fine, which is why nobody caught it: the images kept loading from cache in every developer's browser, and the failure only shows up on a cold visit from a machine that has never been to the site before. This is the most common critical finding there is, and it is almost always on a subdomain nobody remembers owning.

Fix that one thing and the score goes to 79. Not higher, because the second finding takes over the cap: a product page telling search engines not to index it, a leftover noindex from a staging deploy. The page ranks nowhere, converts nothing, and looks perfect.

Delete it and the site scores 94.

Two fixes, roughly twenty minutes, 49 to 94. That is what a cap is for — it puts the two findings that actually matter at the top of the page instead of burying them under six that do not.

The middle: things that used to be true

Three medium findings, and all three are decay rather than error. A supplier link that 404s because the supplier rebranded. Two category pages that ended up with the same meta description after a template change. A redirect chain that grew a second hop when the www rule was added on top of the HTTPS rule.

None of these were mistakes when they were made. They are what a site does when it is left alone for eighteen months. Together they are why SEO sits at 68 while everything else is near full marks — and why, once the cap lifts, SEO is the category worth the next hour.

The cheap tail

A title four characters over, two H1s on a page, no canonical tag. Each one carries the smallest weight there is, and between them they move SEO by a few points. Worth fixing on a slow afternoon, not worth a sprint.

This is the part the old scoring got wrong, and it is worth saying plainly: when every finding simply subtracted, a long tail of small things could sink a site further than one expired certificate. It cannot now. A category is scored on the share of weight it passed, so three low findings cost what three low findings should.

What we would do first

Fix the certificate. Re-scan. Delete the noindex. Re-scan again.

Then look at SEO, which is the only category doing real damage on its own merits, and leave the tail for whenever.

The full ledger

as returned

Structural

[medium]

Broken link (HTTP 404)

https://millbrook-textiles.example/about

https://northfield-supply.example/suppliers

SEO

[high]

Page blocks indexing via meta robots (noindex, nofollow)

noindex, nofollow

https://northfield-supply.example/products/field-jacket

[medium]

Duplicate meta description across pages

Quality supply for the outdoors. Free shipping over 50.

https://northfield-supply.example/collections/jackets

[medium]

Redirect chain (2 hops) before loading

http://northfield-supply.example → https://northfield-supply.example → https://www.northfield-supply.example

https://northfield-supply.example

[low]

Title length (64 chars) outside recommended 10-60

Northfield Supply Co. — Field Jackets, Packs and Outdoor Equipment

https://northfield-supply.example/collections/jackets

[low]

Multiple H1 tags found (2)

https://northfield-supply.example/products/field-jacket

[low]

Missing canonical tag

https://northfield-supply.example/collections/jackets

Security

[critical]

SSL certificate has expired

Expired 2026-07-02T00:00:00.000Z

https://cdn.northfield-supply.example/assets/hero.jpg

Same checks, your site.

No commentary, just the list and the number.

Run a scan