Gulf CybersecurityBaseline
العربيةCheck your domain
Kuwait City at night from space, its streets in amber light along the dark water of the bayRiyadh at night from space, a wide grid of white and amber light in the desertDubai at night from space, with Palm Jumeirah lit in the sea below the coast roadDoha at night from space, the city's lights spreading from the bay along its roadsBahrain at night from space, the island's towns joined by lit roads in a dark seaMuscat and Al Seeb at night from space, the coast road and the airport in amber light beside a dark sea

Valid HTTPS

Valid HTTPS

Does the website open over HTTPS with a valid certificate?

Why it matters

HTTPS encrypts the connection and proves that the visitor reached the real site. An expired, self signed or mismatched certificate trains people to click through warnings, which is exactly what an attacker relies on.

When a domain passes

Passes when the TLS handshake succeeds with a certificate that is in date, matches the name and chains to a trusted authority. A missing intermediate certificate is noted but still passes.

How to fix it

  1. Use certificates from a trusted authority and renew them automatically, for example over ACME.
  2. Serve the full chain, including the intermediate certificates.
  3. Make the certificate cover the bare domain and the usual web prefix.

Reference specifications

All thirteen standards