Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
C=US, ST=Missouri, O=The Washington University, CN=f5-wustl-www1.wustl.edu
Issuer
C=US, O=InCommon, LLC, CN=InCommon RSA OV SSL CA 3
Valid From
July 02, 2026
Valid Until
January 16, 2027
178 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:79:2F:3D:4E:8A:5B:89:26:1C:25:0B:65:18:EF:C5:1B:94:5E:F6:36:B4:0B:1C:76:83:0D:40:51:A6:40:63
Alternative Names
Security Configuration
TLS Protocols
TLS 1.0
TLS 1.1
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
- • TLS 1.1 is deprecated and should be disabled
- • TLS 1.0 is deprecated and should be disabled
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=300
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
62 domains
wustl.edu
*.wustl.edu
f5-wustl-www1.wustl.edu
*.alumni.wustl.edu
*.ampdb.wustl.edu
*.ampweb.wustl.edu
*.anest.wustl.edu
*.arl.wustl.edu
*.art-sci.wustl.edu
*.artsci.wustl.edu
*.artscidev.wustl.edu
*.artscistage.wustl.edu
*.auto.wustl.edu
*.bclab.wustl.edu
*.biochem.wustl.edu
*.bme.wustl.edu
*.bmr.wustl.edu
*.brown.wustl.edu
*.cec.wustl.edu
*.chemistry.wustl.edu
*.chpc.wustl.edu
*.cs.wustl.edu
*.cse.wustl.edu
*.dom.wustl.edu
*.dsg.wustl.edu
*.eec.wustl.edu
*.eece.wustl.edu
*.emailtest.wustl.edu
*.emed.wustl.edu
*.engineering.wustl.edu
*.engr.wustl.edu
*.envolve.wustl.edu
*.eps.wustl.edu
*.epsc.wustl.edu
*.ese.wustl.edu
*.fpmdom.wustl.edu
*.frankenstein200.wustl.edu
*.genetics.wustl.edu
*.genome.wustl.edu
*.gep.wustl.edu
*.giving.wustl.edu
*.gotest.wustl.edu
*.gsc.wustl.edu
*.htcf.wustl.edu
*.im.wustl.edu
*.ip.wustl.edu
*.ise.wustl.edu
*.kotzbauerlab.wustl.edu
*.law.wustl.edu
*.library.wustl.edu
*.lookingglass.wustl.edu
*.lsn.wustl.edu
*.madisonlab.wustl.edu
*.mass-spec.wustl.edu
*.math.wustl.edu
*.med.wustl.edu
*.medicine.wustl.edu
*.mems.wustl.edu
*.mir.wustl.edu
*.mtac.wustl.edu
*.mx.wustl.edu
*.net.wustl.edu