Cached · just now
79/100 SECURITY SCORE

Certificate Information

Subject
C=JP, ST=Tokyo, L=Chiyoda-ku, O=LY Corporation, CN=gw01.yahoo.co.jp
Issuer
C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan SureServer CA G4
Valid From
January 08, 2026
Valid Until
February 07, 2027 313 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
67:73:73:16:3B:2F:F6:00:F2:3B:34:AC:85:EF:FC:03:41:2B:AA:62:29:9D:50:D1:71:54:A2:3A:01:53:53:1F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

74 domains
yahoo.co.jp *.yahoo.co.jp gw01.yahoo.co.jp *.ane.yahoo.co.jp *.auctions.yahoo.co.jp *.chiebukuro.yahoo.co.jp *.edit.yahoo.co.jp *.finance.yahoo.co.jp *.grmtrez.yahoo.co.jp *.jobcatalog.yahoo.co.jp *.landpress-external.yahoo.co.jp *.landpress.yahoo.co.jp *.listing.yahoo.co.jp *.login.yahoo.co.jp *.mail.yahoo.co.jp *.news.yahoo.co.jp *.realestate.yahoo.co.jp *.shopping.yahoo.co.jp *.store.yahoo.co.jp *.travel.yahoo.co.jp *.wallet.yahoo.co.jp *.yjtag.yahoo.co.jp account.psi.yahoo.co.jp cart.order.yahoo.co.jp e.developer.yahoo.co.jp forms.business.yahoo.co.jp inquiry.ms.yahoo.co.jp login.bizmanager.yahoo.co.jp r.reservation.yahoo.co.jp tool.safety.yahoo.co.jp ucar.carview.yahoo.co.jp web.invoice.yahoo.co.jp www.lohaco.yahoo.co.jp *.auth.login.yahoo.co.jp acmt.digicon.corp.yahoo.co.jp portal.yadui.business.yahoo.co.jp test.odhistory.shopping.yahoo.co.jp test.pro.store.yahoo.co.jp

Other domains in certificate

ai-wiki.jp
www.bosaiguide.jp
*.carview.co.jp
www.digitalguide.jp
*.flava-cloud.com
*.geocities.jp
*.line.biz
ffpr.line.me
lycorp-security.jp *.lycorp-security.jp
*.lycorp.co.jp
www.search311.jp
www.sp-hinan.jp
*.east.edge.storage-yahoo.jp *.edge.storage-yahoo.jp *.global.edge.storage-yahoo.jp *.west.edge.storage-yahoo.jp
*.east.edge.storage-yahoobox.jp
www.techbasevn.com
control.theyjtag.jp
*.buzzhome.yahoo-net.jp *.yahoo-net.jp
*.yahoo.jp
yahoo.ne.jp
circus.shopping.yahooapis.jp *.finance.yahooapis.jp *.mail.yahooapis.jp test.circus.shopping.yahooapis.jp *.yahooapis.jp
*.yahoobox.jp
attachment.yahoomail.jp
*.c.yimg.jp *.shopping.c.yimg.jp *.yimg.jp
yjtag.jp *.yjtag.jp