SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for *.twilio.com, *.ashburn.us1.twilio.com, *.sydney.us1.twilio.com, *.dublin.us1.twilio.com, *.frankfurt.us1.twilio.com, *.tokyo.us1.twilio.com, *.osaka.us1.twilio.com, *.singapore.us1.twilio.com, *.umatilla.us1.twilio.com, not for api-intermediate.edge.prod.twilio.com

75/100 SECURITY SCORE

Detected Technologies

Certificate Information

Subject
C=US, ST=California, L=San Francisco, O=Twilio Inc., CN=*.twilio.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
March 02, 2026
Valid Until
September 16, 2026 158 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CF:30:C4:BB:C0:8C:73:22:6F:39:CD:25:3D:4F:9E:31:DB:98:E7:13:17:0B:82:8D:19:76:FF:25:D6:A7:8B:DF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)
Warnings
  • TLS 1.1 is deprecated and should be disabled
  • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

152 domains
twilio.com *.twilio.com au1.twilio.com br1.twilio.com de1.twilio.com eu1.twilio.com ie1.twilio.com jp1.twilio.com jp2.twilio.com sg1.twilio.com us1.twilio.com us2.twilio.com *.au1.twilio.com *.br1.twilio.com *.de1.twilio.com *.eu1.twilio.com *.ie1.twilio.com *.jp1.twilio.com *.jp2.twilio.com *.sg1.twilio.com *.us1.twilio.com *.us2.twilio.com ashburn-ix.au1.twilio.com ashburn-ix.ie1.twilio.com ashburn-ix.us1.twilio.com ashburn.au1.twilio.com ashburn.ie1.twilio.com ashburn.us1.twilio.com ashburn.us2.twilio.com dublin.au1.twilio.com dublin.ie1.twilio.com dublin.us1.twilio.com dublin.us2.twilio.com frankfurt-ix.au1.twilio.com frankfurt-ix.ie1.twilio.com frankfurt-ix.us1.twilio.com frankfurt.au1.twilio.com frankfurt.ie1.twilio.com frankfurt.us1.twilio.com frankfurt.us2.twilio.com ie1-ix.ie1.twilio.com ie1-ix.us1.twilio.com ing-test.ie1.twilio.com ing-test.us1.twilio.com ireland.ie1.twilio.com london-ix.au1.twilio.com london-ix.ie1.twilio.com london-ix.us1.twilio.com osaka-ix.au1.twilio.com osaka-ix.ie1.twilio.com osaka-ix.us1.twilio.com osaka.au1.twilio.com osaka.ie1.twilio.com osaka.us1.twilio.com osaka.us2.twilio.com san-jose-ix.au1.twilio.com san-jose-ix.ie1.twilio.com san-jose-ix.us1.twilio.com sao-paulo.au1.twilio.com sao-paulo.ie1.twilio.com sao-paulo.us1.twilio.com sao-paulo.us2.twilio.com singapore-ix.au1.twilio.com singapore-ix.ie1.twilio.com singapore-ix.us1.twilio.com singapore.au1.twilio.com singapore.ie1.twilio.com singapore.us1.twilio.com singapore.us2.twilio.com sydney-ix.au1.twilio.com sydney-ix.ie1.twilio.com sydney-ix.us1.twilio.com sydney.au1.twilio.com sydney.ie1.twilio.com sydney.us1.twilio.com sydney.us2.twilio.com tokyo-ix.au1.twilio.com tokyo-ix.ie1.twilio.com tokyo-ix.us1.twilio.com tokyo.au1.twilio.com tokyo.ie1.twilio.com tokyo.us1.twilio.com tokyo.us2.twilio.com umatilla.au1.twilio.com umatilla.ie1.twilio.com umatilla.us1.twilio.com umatilla.us2.twilio.com *.ashburn-ix.au1.twilio.com *.ashburn-ix.ie1.twilio.com *.ashburn-ix.us1.twilio.com *.ashburn.au1.twilio.com *.ashburn.ie1.twilio.com *.ashburn.us1.twilio.com *.ashburn.us2.twilio.com *.dublin.au1.twilio.com *.dublin.ie1.twilio.com *.dublin.us1.twilio.com *.dublin.us2.twilio.com *.frankfurt-ix.au1.twilio.com *.frankfurt-ix.ie1.twilio.com *.frankfurt-ix.us1.twilio.com *.frankfurt.au1.twilio.com *.frankfurt.ie1.twilio.com *.frankfurt.us1.twilio.com *.frankfurt.us2.twilio.com *.ie1-ix.ie1.twilio.com *.ie1-ix.us1.twilio.com *.ing-test.ie1.twilio.com *.ing-test.us1.twilio.com *.ireland.ie1.twilio.com *.london-ix.au1.twilio.com *.london-ix.ie1.twilio.com *.london-ix.us1.twilio.com *.osaka-ix.au1.twilio.com *.osaka-ix.ie1.twilio.com *.osaka-ix.us1.twilio.com *.osaka.au1.twilio.com *.osaka.ie1.twilio.com *.osaka.us1.twilio.com *.osaka.us2.twilio.com *.san-jose-ix.au1.twilio.com *.san-jose-ix.ie1.twilio.com *.san-jose-ix.us1.twilio.com *.sao-paulo.au1.twilio.com *.sao-paulo.ie1.twilio.com *.sao-paulo.us1.twilio.com *.sao-paulo.us2.twilio.com *.singapore-ix.au1.twilio.com *.singapore-ix.ie1.twilio.com *.singapore-ix.us1.twilio.com *.singapore.au1.twilio.com *.singapore.ie1.twilio.com *.singapore.us1.twilio.com *.singapore.us2.twilio.com *.sydney-ix.au1.twilio.com *.sydney-ix.ie1.twilio.com *.sydney-ix.us1.twilio.com *.sydney.au1.twilio.com *.sydney.ie1.twilio.com *.sydney.us1.twilio.com *.sydney.us2.twilio.com *.tokyo-ix.au1.twilio.com *.tokyo-ix.ie1.twilio.com *.tokyo-ix.us1.twilio.com *.tokyo.au1.twilio.com *.tokyo.ie1.twilio.com *.tokyo.us1.twilio.com *.tokyo.us2.twilio.com *.umatilla.au1.twilio.com *.umatilla.ie1.twilio.com *.umatilla.us1.twilio.com *.umatilla.us2.twilio.com