86/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=e.microsoft.com
Issuer
C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07
Valid From
November 07, 2025
Valid Until
May 06, 2026 126 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA384-RSA
SHA-256 Fingerprint
2E:3B:78:D6:BA:5A:68:B6:D9:7E:18:63:DE:EC:D7:7A:2A:50:0A:B2:7E:9B:B9:E3:EE:FB:5A:BD:45:2C:F2:F4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

118 domains
academic.microsoft.com academy.microsoft.com aischool.microsoft.com answerdeskdev.microsoft.com autogen.microsoft.com azuredata.microsoft.com billing.microsoft.com boards.microsoft.com boost.microsoft.com businessai.microsoft.com cdsacademy.microsoft.com cdsacademystage.microsoft.com cert.microsoft.com cloud.microsoft.com commerce.microsoft.com courses.microsoft.com creator.microsoft.com datacenteracademy.microsoft.com dcacademystage.microsoft.com demos.microsoft.com discover.microsoft.com e.microsoft.com fluent.microsoft.com fluent1.microsoft.com fluent2.microsoft.com gsuite.microsoft.com help.microsoft.com lovessmb.microsoft.com microsoftedgesupport.microsoft.com msppdd.microsoft.com naspo.microsoft.com openedx.microsoft.com oxa.microsoft.com powerquery.microsoft.com print.microsoft.com seclud.microsoft.com soundscape.microsoft.com startup-staging.microsoft.com startup.microsoft.com strategicmissions.microsoft.com texasdir.microsoft.com webgallery.microsoft.com win-sdx.microsoft.com admin.manage.microsoft.com amsterdam.myenvisiontour.microsoft.com az416426.ftop.microsoft.com beijing.myenvisiontour.microsoft.com berlin.myenvisiontour.microsoft.com community.powerpages.microsoft.com community.vivainsights.microsoft.com consentreceiverfd.ftop.microsoft.com envision.event.microsoft.com gstatic.ftop.microsoft.com london.myenvisiontour.microsoft.com mobileapp.myignitetour.microsoft.com msit.ftop.microsoft.com services.ftop.microsoft.com sessioncatalog.myenvisiontour.microsoft.com sessioncatalog.myignitetour.microsoft.com sf.myenvisiontour.microsoft.com singapore.myenvisiontour.microsoft.com speakerdirectory.myignitetour.microsoft.com sponsors.myenvisiontour.microsoft.com spoprod-a.ftop.microsoft.com static2.ftop.microsoft.com sydney.myenvisiontour.microsoft.com test.frppartneradmin.microsoft.com tokyo.myenvisiontour.microsoft.com toronto.myenvisiontour.microsoft.com wcpstatic.ftop.microsoft.com www.billing.microsoft.com www.startup-staging.microsoft.com amsterdam.myignitetour.techcommunity.microsoft.com bangalore.myignitetour.techcommunity.microsoft.com beijing.myignitetour.techcommunity.microsoft.com berlin.myignitetour.techcommunity.microsoft.com chicago.myignitetour.techcommunity.microsoft.com copenhagen.myignitetour.techcommunity.microsoft.com dubai.myignitetour.techcommunity.microsoft.com hong-kong.myignitetour.techcommunity.microsoft.com johannesburg.myignitetour.techcommunity.microsoft.com london.myignitetour.techcommunity.microsoft.com madrid.myignitetour.techcommunity.microsoft.com mexico-city.myignitetour.techcommunity.microsoft.com milan.myignitetour.techcommunity.microsoft.com mobileapp.myignitetour.techcommunity.microsoft.com mumbai.myignitetour.techcommunity.microsoft.com osaka.myignitetour.techcommunity.microsoft.com paris.myignitetour.techcommunity.microsoft.com prague.myignitetour.techcommunity.microsoft.com qa.ideas.fabric.microsoft.com sao-paulo.myignitetour.techcommunity.microsoft.com seoul.myignitetour.techcommunity.microsoft.com sessioncatalog.myignitetour.techcommunity.microsoft.com shanghai.myignitetour.techcommunity.microsoft.com shenzhen.myignitetour.techcommunity.microsoft.com singapore.myignitetour.techcommunity.microsoft.com speakerdirectory.myignitetour.techcommunity.microsoft.com stockholm.myignitetour.techcommunity.microsoft.com sydney.myignitetour.techcommunity.microsoft.com taipei.myignitetour.techcommunity.microsoft.com tel-aviv.myignitetour.techcommunity.microsoft.com tokyo.myignitetour.techcommunity.microsoft.com toronto.myignitetour.techcommunity.microsoft.com washington-dc.myignitetour.techcommunity.microsoft.com zurich.myignitetour.techcommunity.microsoft.com

Other domains in certificate

domains.microsoft www.domains.microsoft
www.microsoft.ca
lab.microsoft.fr
microsoft.th
microsoftadvertisingawards.com www.microsoftadvertisingawards.com
microsoftcodebook.com www.microsoftcodebook.com
office.plus www.office.plus
ideas.powerbi.com