Open
Cached
·
just now
75/100
SECURITY SCORE
Certificate Information
Subject
CN=cdn.arkadiumhosted.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 25, 2025
Valid Until
March 25, 2026
53 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
47:40:13:AE:51:A4:63:2E:47:28:26:D5:DD:0F:45:8B:EB:1C:9D:B6:44:4B:AA:86:50:72:52:49:F0:DA:1C:BF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.0
TLS 1.1
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
Warnings
- • TLS 1.1 is deprecated and should be disabled
- • TLS 1.0 is deprecated and should be disabled
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
82 domains
arenax-aarp-dev.arkadiumhosted.com
arenax-aarp.arkadiumhosted.com
cdn.arkadiumhosted.com
hsn-core-staging.arkadiumhosted.com
aarp-ams.cdn.arkadiumhosted.com
aarp.cdn.arkadiumhosted.com
ams.cdn.arkadiumhosted.com
arenacommonservices.cdn.arkadiumhosted.com
arenaconnect.cdn.arkadiumhosted.com
arenaservices-widgets.cdn.arkadiumhosted.com
arenaservices.cdn.arkadiumhosted.com
arenawidgets-testing.cdn.arkadiumhosted.com
arenax-api-auth.cdn.arkadiumhosted.com
arenax-api-challenges.cdn.arkadiumhosted.com
arenax-api-games.cdn.arkadiumhosted.com
arenax-api-highscores.cdn.arkadiumhosted.com
arenax-api-leaderboard.cdn.arkadiumhosted.com
arenax-api.cdn.arkadiumhosted.com
arenax-blobstorage.cdn.arkadiumhosted.com
arenax-client-dev.cdn.arkadiumhosted.com
arenax-client.cdn.arkadiumhosted.com
askystorage-qa.cdn.arkadiumhosted.com
askystorage.cdn.arkadiumhosted.com
cdn.arenax-sandbox.arkadiumhosted.com
connect.cdn.arkadiumhosted.com
factiveblobstorage.cdn.arkadiumhosted.com
gamesfeedsblob.cdn.arkadiumhosted.com
geoip.cdn.arkadiumhosted.com
inhabit-app.cdn.arkadiumhosted.com
inhabit-service.cdn.arkadiumhosted.com
inhabit.cdn.arkadiumhosted.com
inhabitmaindev.cdn.arkadiumhosted.com
inhabitmainlive.cdn.arkadiumhosted.com
socialarena-content.cdn.arkadiumhosted.com
techraptor.wrapper-cdn.arkadiumhosted.com
testing.cdn.arkadiumhosted.com
widget.cdn.arkadiumhosted.com
widgetapi-inhabit.as.arkadiumhosted.com
games.ajc.com
cat.arkadium.com
comcast-test.arkadium.com
comcast-true.arkadium.com
competency.arkadium.com
inhabit-ads.arkadium.com
inhabit-testing.arkadium.com
inhabit.arkadium.com
usertesting.arkadium.dev
arena-test.arkadiumarena.com
arenax-aarp-dev2.arkadiumarena.com
freedailydollars.arkadiumarena.com
freehtml.arkadiumarena.com
games-app-first.arkadiumarena.com
games-blu.arkadiumarena.com
games-cricket.arkadiumarena.com
games-metropcs.arkadiumarena.com
idee-fuer-mich.arkadiumarena.com
juegos-app-first.arkadiumarena.com
lifestylesafter50.arkadiumarena.com
portal-api.arkadiumarena.com
portal.arkadiumarena.com
speldome.arkadiumarena.com
tecnotitangames.arkadiumarena.com
weekender.arkadiumarena.com
whooshu.arkadiumarena.com
zizanio.arkadiumarena.com
www.bestpuzzlesandgames.com
games.crosswordgiant.com
games.dailymail.co.uk
games.dailymailint.co.uk
games.dallasnews.com
games.daytondailynews.com
juegos.elnuevodia.com
games.fltimes.com
www.gamelab.com
arcade.hsn.com
jeux.ludojeux.com
games.nationalreview.com
juegos.primerahora.com
games.puzzlebaron.com
games.puzzles.ca
games.thecourierexpress.com
games.theprogressnews.com
Other domains in certificate