DNS Gurus

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for www.fastshop.com.br, a2you.com.br, admin.fastshop.com.br, api.fastshop.com.br, apicdn.fastshop.com.br, apigw-dev.fastshop.com.br, apigw-qa.fastshop.com.br, apigw.fastshop.com.br, app.fastshop.com.br, not for a23-213-78-189.deploy.static.akamaitechnologies.com

Open Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
C=BR, ST=Sao Paulo, L=SAO PAULO, O=FAST SHOP S.A, CN=www.fastshop.com.br
Issuer
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Valid From
September 28, 2025
Valid Until
September 29, 2026 289 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:94:B9:FE:59:B8:84:F8:BC:C4:AB:5B:70:46:3B:64:94:C5:F4:18:2F:25:52:AC:54:F0:D3:47:62:03:67:35
Alternative Names
94 domains

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)
Warnings
  • • TLS 1.1 is deprecated and should be disabled
  • • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

94 domains
a2you.com.br cloud.a2you.com.br www.a2you.com.br
admin.fastshop.com.br api.fastshop.com.br apicdn.fastshop.com.br apigw-dev.fastshop.com.br apigw-qa.fastshop.com.br apigw.fastshop.com.br app.fastshop.com.br assinaturaprime.fastshop.com.br busca.fastshop.com.br bvt2resources1.fastshop.com.br bvt2resources2.fastshop.com.br bvt2resources3.fastshop.com.br carrinho.fastshop.com.br claro.fastshop.com.br cloud.fastshop.com.br confluence.fastshop.com.br conteudoespecial.fastshop.com.br crm.fastshop.com.br education.fastshop.com.br empresas.fastshop.com.br fastclub.fastshop.com.br fastlife.fastshop.com.br fastshop.com.br formulariocasainteligente.fastshop.com.br fvboleto.fastshop.com.br fvtresources1.fastshop.com.br fvtresources2.fastshop.com.br fvtresources3.fastshop.com.br fvtwcs.fastshop.com.br horacius.fastshop.com.br imagens.fastshop.com.br imagens2.fastshop.com.br imagens3.fastshop.com.br intranet.fastshop.com.br io.fastshop.com.br jira.fastshop.com.br linkpagamento.fastshop.com.br linkqa2pagamento.fastshop.com.br listadecasamento.fastshop.com.br listavirtual.fastshop.com.br m.fastshop.com.br mbvt2wcs.fastshop.com.br mkt.fastshop.com.br mkt2.fastshop.com.br notes-1p1ugphcv2m80-rules.fastshop.com.br perfwcs.fastshop.com.br planos.fastshop.com.br portal.fastshop.com.br prdresources1.fastshop.com.br prdresources10.fastshop.com.br prdresources2.fastshop.com.br prdresources3.fastshop.com.br prdresources4.fastshop.com.br prdresources5.fastshop.com.br prdresources6.fastshop.com.br prdresources7.fastshop.com.br prdresources8.fastshop.com.br prdresources9.fastshop.com.br price-management-apigw.fastshop.com.br price-management.fastshop.com.br prime.fastshop.com.br qa-portal.fastshop.com.br qa2.fastshop.com.br render-web.fastshop.com.br secure2.fastshop.com.br secure3.fastshop.com.br seguro.fastshop.com.br site.fastshop.com.br sso.fastshop.com.br tabletbvt2wcs.fastshop.com.br tbvt2wcs.fastshop.com.br uatboleto.fastshop.com.br uatwcs.fastshop.com.br webapp.fastshop.com.br webapp2-stg.fastshop.com.br www.fastclub.fastshop.com.br www.fastlife.fastshop.com.br www.fastshop.com.br www.kids.fastshop.com.br www1.fastshop.com.br
fsh-hub.kaive-qa.com.br mkp-hub.kaive-qa.com.br
fsh-hub-qa.kaive.com.br fsh-hub.kaive.com.br hml-fsh-hub.kaive.com.br hml-mkp-hub.kaive.com.br mkp-hub-qa.kaive.com.br mkp-hub.kaive.com.br
www.nio.com.br
parceirofast.com.br www.parceirofast.com.br