FREE TOOL · NO SIGN-UP
Is your padlock really locked?
We read your certificate from the public Certificate Transparency logs, confirm your browser trusts the connection, and grade your security headers with Mozilla's HTTP Observatory.
How it works
Straight from the source.
Every result comes live from a recognised public source — named under your results, so you can check our work.
- 1Read the public recordCertificate Transparency logs — via SSLMate's Cert Spotter, with crt.sh as backup — list every certificate issued for your name.
- 2Test the connectionYour own browser opens a secure connection. It only succeeds if the certificate is trusted.
- 3Grade the headersMozilla's HTTP Observatory grades the security headers your server sends.
Private by design
No accounts, no cookies, no tracking. NuuMa doesn't store what you check. To run the tests, the address you enter goes directly from your browser to the public services named above. The only thing kept is a small daily counter in your own browser that keeps these tools free for everyone.
Questions, answered plainly
What is Certificate Transparency?
Public, append-only logs of issued certificates. Chrome and Safari only trust publicly issued certificates that appear in them, so anyone can see which certificates exist for a domain.
My certificate lasts under 90 days. Is that a problem?
No. Many authorities, including Let's Encrypt, issue short-lived certificates that renew automatically. What matters is that renewal is automated.
What is a CAA record?
A DNS record naming the certificate authorities allowed to issue for your domain. It stops anyone else issuing a certificate in your name.
More free tools
Keep checking.
Found something to fix?
Fully managed hosting from $3.99 a month — with free SSL, nightly backups and free migration. Or talk to a person first.
