70/100 SECURITY SCORE

Certificate Information

Subject
C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.tanx.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024
Valid From
June 09, 2025
Valid Until
July 11, 2026 235 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:29:10:4A:67:32:E9:C8:17:B4:10:E1:0E:57:DD:04:7D:39:5C:32:BE:53:D4:9F:50:AD:8F:F8:3B:11:D8:86
Alternative Names

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • TLS 1.3 is not supported (recommended)
  • TLS 1.1 is deprecated and should be disabled
  • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Weak
max-age=0
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

461 domains
*.9game.cn *.bbs.9game.cn *.test.9game.cn

Other domains in certificate

56xiniao.com
*.8.shareyouli.com
*.a-map.cn
*.a-map.co
*.a-map.link
*.a-map.vip
*.45e.alibaba-inc.com *.aikit.alibaba-inc.com *.ailab.alibaba-inc.com *.aisc-widgets.alibaba-inc.com *.algo.alibaba-inc.com alibaba-inc.com *.alibaba-inc.com *.alicdn.alibaba-inc.com *.alicom.alibaba-inc.com *.alilang.alibaba-inc.com *.alimebot.alibaba-inc.com *.aloha.alibaba-inc.com *.analysis.alibaba-inc.com *.aop2.alibaba-inc.com *.arnold.alibaba-inc.com *.atp-olympic-ali.alibaba-inc.com *.atp-olympic-beijing.alibaba-inc.com *.atp-olympic-ioc.alibaba-inc.com *.atp-olympic.alibaba-inc.com *.atp-paralympic-ali.alibaba-inc.com *.atp-paralympic-beijing.alibaba-inc.com *.atp-paralympic-ioc.alibaba-inc.com *.atp.alibaba-inc.com *.baichuan.alibaba-inc.com *.basic.alibaba-inc.com *.bigsize.alibaba-inc.com *.bohry.alibaba-inc.com *.broker.gaia.alibaba-inc.com *.campaign.alibaba-inc.com *.campus.alibaba-inc.com *.caops.alibaba-inc.com *.cbd.alibaba-inc.com *.ccc.alibaba-inc.com *.cdn.alibaba-inc.com *.chuangyi.alibaba-inc.com *.civita.alibaba-inc.com *.cmdb.alibaba-inc.com *.cn-zhangjiakou.alibaba-inc.com *.cntc.alibaba-inc.com *.codeup.alibaba-inc.com console.flow.alibaba-inc.com *.coo.alibaba-inc.com *.cost.alibaba-inc.com *.crm.alibaba-inc.com crm.maitix.alibaba-inc.com *.daily.alibaba-inc.com dashboard.surge.alibaba-inc.com *.datas.alibaba-inc.com *.datav-lab.alibaba-inc.com *.datawin.alibaba-inc.com *.demon.alibaba-inc.com *.designer.alibaba-inc.com *.diagnosis.alibaba-inc.com *.dipper.alibaba-inc.com *.disco-bops.alibaba-inc.com *.discovery.alibaba-inc.com *.dlab.alibaba-inc.com *.dp.alibaba-inc.com *.ent-assets.alibaba-inc.com *.esearch.alibaba-inc.com *.esl-name-card.alibaba-inc.com *.etcd.alibaba-inc.com *.eulery.alibaba-inc.com *.event-shenma.alibaba-inc.com *.event.alibaba-inc.com *.faas.alibaba-inc.com *.fd-safety.alibaba-inc.com *.finance.alibaba-inc.com *.fleming.alibaba-inc.com *.fx.alibaba-inc.com *.gdb.alibaba-inc.com *.graphcompute.alibaba-inc.com *.gundamx.alibaba-inc.com *.hcm.alibaba-inc.com *.hera.alibaba-inc.com *.hitsdb.alibaba-inc.com *.idiscovery.alibaba-inc.com *.idle.alibaba-inc.com *.imp.alibaba-inc.com *.inneradmin.alibaba-inc.com *.interactive.card.alibaba-inc.com *.jx.alibaba-inc.com *.kaola.alibaba-inc.com *.kbvision.alibaba-inc.com *.kehushi.alibaba-inc.com *.legal.alibaba-inc.com *.lord.alibaba-inc.com *.mail.alibaba-inc.com *.mc.alibaba-inc.com *.midplatform-shenma.alibaba-inc.com *.mkt.alibaba-inc.com *.mock.alibaba-inc.com *.model-sync.alibaba-inc.com *.monad.alibaba-inc.com *.mop.alibaba-inc.com *.movie.alibaba-inc.com *.mr.alibaba-inc.com *.msproject.teambition.alibaba-inc.com *.nebula.alibaba-inc.com *.newretail.order.check.alibaba-inc.com *.nqs-kl.alibaba-inc.com *.olympic.alibaba-inc.com *.onesec.alibaba-inc.com *.ops.alibaba-inc.com *.orchestrator.alibaba-inc.com *.oxs.alibaba-inc.com p.router.alibaba-inc.com *.pai.alibaba-inc.com *.polaris.alibaba-inc.com *.polestar-hope.alibaba-inc.com *.portal.alibaba-inc.com *.pre-atp-olympic.alibaba-inc.com *.pre-atp-paralympic.alibaba-inc.com *.pre-cost.alibaba-inc.com pre-dashboard.surge.alibaba-inc.com pre-db.rhea.alibaba-inc.com *.pre-eureka-gateway.alibaba-inc.com *.pre-fx.alibaba-inc.com pre-perception.adlabs.alibaba-inc.com pre-xc.university.alibaba-inc.com *.pre-zhongtu.alibaba-inc.com *.pre-zoro.alibaba-inc.com prepub.uiless.aone.alibaba-inc.com *.procurement.alibaba-inc.com *.property.alibaba-inc.com *.qa.alibaba-inc.com *.qingxun.alibaba-inc.com *.reid.alibaba-inc.com *.scan.alibaba-inc.com *.scheduler.asi.alibaba-inc.com seq.tts-xy293.alibaba-inc.com *.service-portal.alibaba-inc.com *.shenma-spacex.alibaba-inc.com *.shennong2.alibaba-inc.com *.silkflow-platform.alibaba-inc.com *.silkflow.alibaba-inc.com *.simulator.alibaba-inc.com *.smart.alibaba-inc.com *.sop-lazada.alibaba-inc.com *.speech.alibaba-inc.com *.sre.alibaba-inc.com *.staging.alibaba-inc.com *.system.alibaba-inc.com *.tape.speech.alibaba-inc.com *.teambition.aone.alibaba-inc.com *.teambiton.alibaba-inc.com *.tiansuan.alibaba-inc.com *.train.alibaba-inc.com *.twb.alibaba-inc.com *.udbank.alibaba-inc.com *.utcp.alibaba-inc.com *.v2.alibaba-inc.com *.video.alibaba-inc.com *.vip.alibaba-inc.com *.vwr.alibaba-inc.com *.web.alibaba-inc.com *.workspace.alibaba-inc.com *.ws.qin.alibaba-inc.com *.wt-cntc.alibaba-inc.com *.wt-cntx.alibaba-inc.com *.x-space.alibaba-inc.com *.xue.alibaba-inc.com *.xunxi.alibaba-inc.com *.youkumediacms.alibaba-inc.com *.youkumoke.alibaba-inc.com *.zalusercenter.alibaba-inc.com *.zbyun.alibaba-inc.com *.zola-router.alibaba-inc.com *.zoro.alibaba-inc.com
alibabagroup.com *.alibabagroup.com
alicdn.com *.alicdn.com pre-dcdn-data-analysis.inner.alicdn.com
*.alidns.com
*.aligames.com
*.admin.alihealth.cn alihealth.cn *.alihealth.cn
*.alihive.com *.ib.alihive.com *.ibos.alihive.com
*.arnold.alikunlun.com
alimama.com *.alimama.com *.click.alimama.com *.clickserver.alimama.com *.koala.alimama.com *.m.alimama.com trace.thor.alimama.com
*.pay.alios.cn *.release.alios.cn
*.aliplay.com
*.palace.alisports.com *.platform.alisports.com
alitrip.com *.alitrip.com *.m.alitrip.com
alitrip.hk *.alitrip.hk
aliwork.com
*.abs-sign.amap.com *.acis.amap.com *.amaps.amap.com *.aos.amap.com *.aosdev.amap.com *.apistore.amap.com *.auth.amap.com *.backend.amap.com *.bus.amap.com *.ces-pre.amap.com *.ces.amap.com *.check-poi-postx-post.amap.com *.csm.amap.com *.dev.amap.com *.dynamic.amap.com *.gateway.amap.com *.lse2-discover-es.amap.com *.m.amap.com *.offline.amap.com *.qa.amap.com *.sample.amap.com *.titan.amap.com *.tsapi.amap.com *.walkman.amap.com
*.auweb.cn
*.biubiu001.com
*.cbd.cainiao-inc.com *.cnlp.cainiao-inc.com *.cone.cainiao-inc.com *.gos.cainiao-inc.com *.operation.cainiao-inc.com *.sg.cainiao-inc.com *.subsite.cainiao-inc.com *.thub.cainiao-inc.com *.wmp.cainiao-inc.com
cainiao.com *.cainiao.com *.cnai.cainiao.com *.cone.cainiao.com *.dscc-admin.cainiao.com *.greedsolver.cainiao.com *.lep.cainiao.com *.loginx.cainiao.com *.pre.cainiao.com *.transocean.cainiao.com *.wapa.cainiao.com *.wt.cainiao.com *.ysxt.cainiao.com
*.ckticket.com
cnzz.com *.cnzz.com *.mobile.cnzz.com
cainiao.com.cn *.cainiao.com.cn guobei.com.cn *.guobei.com.cn *.holoworld.com.cn *.wapa.alihealth.com.cn
*.kaola.com.hk
*.coolnetc.cn
*.coolnetc.com
*.coolnetu.cn
*.coolnetu.com
*.coolu.net
*.cualiweb.com
*.dayu.com *.mp.dayu.com *.napi.dayu.com
*.public.dingtalk.com *.wapa.dingtalk.com
gbdaihxk.eapps.dingtalkapps.com
dingtalkcloud.com *.dingtalkcloud.com *.eapps.dingtalkcloud.com
eicontract.com
*.backend.ele.me *.be.ele.me *.click.ele.me *.ele.me *.faas.ele.me *.kunlun.ele.me *.shop.ele.me *.shopping.ele.me *.star.ele.me *.tb.ele.me *.test.ele.me
ele.to
*.eleme.cn *.shop.eleme.cn
*.elemecdn.com
*.alpha.elenet.me *.elenet.me *.faas.alpha.elenet.me *.test.alpha.elenet.me *.test.elenet.me
etao.com *.etao.com *.m.etao.com
*.ewtp.com
*.content.fliggy.com *.fl.fliggy.com *.pre-fl.fliggy.com
*.funsporx.net
*.ces.gaode.com
*.hemamax.com
*.admin.hemaos.com *.forms.hemaos.com *.gateway.hemaos.com *.portal.hemaos.com
*.hemashare.cn
*.homestyler.com
*.hupan.com
imgcook.com *.imgcook.com
*.fend.jiaoyimao.cn
*.jiaoyimao.com
jiyoujia.com *.jiyoujia.com
juhuasuan.com *.juhuasuan.com *.m.juhuasuan.com
*.kangkanglu.com
*.beta.kaola.com *.bss.kaola.com *.cs.kaola.com kaola.com *.kaola.com *.ms.kaola.com *.pre.kaola.com *.test.kaola.com
*.astore-alsc-l100crm.koubei.com *.click.koubei.com *.cstore.koubei.com *.koubei.com *.m.koubei.com *.pre-cstore.koubei.com *.saas.koubei.com *.search.koubei.com *.tribe.koubei.com *.wapa.koubei.com
*.lingxigames.com
*.cp.maitix.com
maizuo6.com *.maizuo6.com
*.des.m.mappcloud.com *.m.mappcloud.com
*.m.miaostreet.com *.pages.miaostreet.com *.pre-mos.miaostreet.com *.wapa.miaostreet.com
mobmore.com *.mobmore.com
*.msintime.com
*.myquark.cn
*.nhcilab.com
*.wapa.piao.cn
puata.info *.puata.info
*.qingxunapp.com
*.rajax-inc.com
*.rajax.me
h5api.m.shareyouli.com h5api.wapa.shareyouli.com
*.m.shejijia.com *.wapa.shejijia.com *.weex.shejijia.com
*.shuqistat.com
*.sm-tc.cn
*.dl-server.sm.cn *.dl-test-server.sm.cn *.medical.sm.cn *.pe.sm.cn *.qishi.sm.cn *.s.sm.cn *.sa.sm.cn *.sj.sm.cn *.test.sm.cn *.xm.sm.cn *.yz.sm.cn *.yz2.sm.cn
tangping.com *.tangping.com
*.gds.tanx.com tanx.com *.tanx.com
*.ailabs.taobao.org *.ssc.taobao.org
taopiaopiao.cn
*.waptest.taopiaopiao.com
*.uacli.com
*.uaclweb.com
*.uaweb.cn
*.uc-engine.cn
*.ac.uc.cn *.app.uc.cn *.apps.uc.cn *.bigsubs.uc.cn *.bu.uc.cn *.c.uc.cn *.cdn.uc.cn *.cloud.uc.cn *.ff.uc.cn *.g.uc.cn *.game.uc.cn *.mp.uc.cn *.open.uc.cn sigma-test-uc.uae-2.uc.cn uc.cn *.uc.cn *.ums.uc.cn *.v.uc.cn *.vps.uc.cn
*.ucweb.com
*.uczzd.cn
um0.cn *.um0.cn
umeng.co *.umeng.co
*.databank.umeng.com *.login.umeng.com umeng.com *.umeng.com
umengcloud.com *.umengcloud.com
umindex.com *.umindex.com
umsns.com *.umsns.com
umtrack.com *.umtrack.com
*.hy01.wandoujia.com
whalecloud.com *.whalecloud.com
*.xiaoshuo1-sm.com
*.xiaoshuo2-sm.com
*.daily.xpmeng.com
*.m.yisou.com *.s.yisou.com *.sa.yisou.com *.sj.yisou.com *.xm.yisou.com *.yisou.com *.yz.yisou.com *.yz2.yisou.com
*.yiupin.com
*.yousuode.cn
*.api.yun.cn *.yun.cn
*.zebrax.yunos.com
*.apolo.yushanfang.com
*.zimgs.cn