STATUS IS UPREADINESS PROFILE

Website readiness profile · Snapshot 23 October 2026

klarna.com

klarna.com's public homepage, certificate and DNS checked against 31 practices and compared with 157 Online Payment & Wallets sites.

Readiness index
92/100

Online Payment & Wallets median 64

Ahead of
98%

of measured Online Payment & Wallets sites

Practices observed
24/28

3 of 31 could not be measured

Popularity band
Top 50K

Chrome UX Report top-sites list

Measured 2026-10-23 12:01:19 UTC from one location. How we measure

Readiness by lane

Green: klarna.com. Thin bar: Online Payment & Wallets peer median.

Enable

87/100

Peers 72

Harden

90/100

Peers 63

Accelerate

100/100

Peers 61

Recover

100/100

Peers 6

Priority fixes for klarna.com

Ordered by impact and by how common each practice is among peers.

  1. Priority 1 · Harden

    Certificate lifetime of 100 days or less

    Observed: The certificate from Amazon had a 394-day validity period, longer than the 100-day maximum that applies from March 2027.

    Why it matters: Under CA/Browser Forum Ballot SC-081v3, the maximum lifetime of public TLS certificates fell to 200 days on 15 March 2026 and falls to 100 days on 15 March 2027 and 47 days on 15 March 2029. Sites that renew by hand will need to renew far more often.

    What to do: Move to automated issuance and renewal now, while you still have time to test it.

    44% of Online Payment & Wallets peers do this. Limit: Certificate and protocol were observed from one vantage point; CDNs can present different certificates by region.

  2. Priority 2 · Enable

    Structured data present

    Observed: The homepage had no JSON-LD structured data.

    What to do: Add JSON-LD for your organization and main content types, then test it with Google's Rich Results Test.

    38% of Online Payment & Wallets peers do this.

  3. Priority 3 · Harden

    DNSSEC signed

    Observed: No DS record was found for klarna.com at its parent zone, so its DNS answers are not DNSSEC-signed.

    What to do: Enable DNSSEC at your DNS provider, then add the DS record at your registrar. Plan provider moves carefully: a stale DS record can make the domain fail to resolve.

    8.3% of Online Payment & Wallets peers do this.

  4. Priority 4 · Enable

    Reachable over IPv6

    Observed: No IPv6 (AAAA) address was published for www.klarna.com.

    What to do: Enable IPv6 at your CDN or host and publish the AAAA record it provides.

    28% of Online Payment & Wallets peers do this.

What klarna.com already does well

Practices fewer than half of Online Payment & Wallets peers use.

  • Nameservers spread across providersNameservers spread across Akamai Edge DNS and Vercara UltraDNS.6.4% of peers
  • CAA records limit who can issue certificatesCAA limits issuance to amazonaws.com, buypass.no, digicert.com and others.18% of peers
  • Static files cached for 30 days or moreLong-lived caching on static files.32% of peers

What we saw

Homepage checked
https://www.klarna.com/
Homepage response
HTTP 200, after 1 redirect
TLS
TLSv1.3, HTTP/2
Certificate
Amazon, 394-day validity, expiring 2027-03-06
CDN or edge
Amazon CloudFront
DNS operators
Akamai Edge DNS, Vercara UltraDNS
HSTS
max-age 365 days, includeSubDomains, preload
DMARC policy
p=reject
Homepage HTML
300 KB, br
Images on homepage
1

Limits: homepage only, one location, one moment. Header checks reflect the homepage response; other pages may differ.

Stack and providers

Seen in the homepage response, certificate and DNS. Provider pages compare how their customers configure the same checks.

All 31 checks

Select a gap for the method and fix. How each check works

Observed 24

  • HTTP requests move to HTTPS
  • HSTS kept for at least a year
  • TLS 1.3 negotiated
  • Certificate has more than 14 days left
  • CAA records limit who can issue certificates
  • DMARC policy enforces quarantine or reject
  • X-Content-Type-Options: nosniff
  • Framing restricted
  • Content Security Policy present
  • Referrer-Policy set
  • HTTP/2 negotiated
  • HTTP/3 advertised
  • HTML compressed
  • Static files cached for 30 days or more
  • No render-blocking scripts in <head>
  • robots.txt published
  • XML sitemap discoverable
  • Canonical URL declared
  • Meta description written
  • Mobile viewport configured
  • Social preview image set
  • Page language declared
  • At most one redirect to the homepage
  • Nameservers spread across providers

Not measured 3

  • security.txt published
  • Modern image formats in use
  • Offscreen images lazy-loaded

Own klarna.com?

Re-run the checks after a change, or verify the site in a free workspace to save reports with history, compare against similar sites and competitors, and track a private action plan. What owners get.

Live status for this site: Status Is Down: klarna.com. This profile covers configuration only.

Compare with other Online Payment & Wallets sites