Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.tmall.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024
Valid From
May 06, 2025
Valid Until
June 07, 2026
190 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F4:DF:75:1A:8C:F5:01:8F:C0:2E:46:11:7C:41:76:A2:E0:E1:8C:71:3D:9B:B2:A4:A2:1C:B9:5A:9E:3B:F1:4E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.0
TLS 1.1
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
Warnings
- • TLS 1.1 is deprecated and should be disabled
- • TLS 1.0 is deprecated and should be disabled
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
153 domains
tmall.com
*.tmall.com
*.3w.tmall.com
*.admin.tmall.com
*.alihealth-1.tmall.com
*.aliqin.tmall.com
*.alsc.tmall.com
*.argus.tmall.com
*.argushsf.tmall.com
*.ascp.tmall.com
*.avigator.tmall.com
*.axbiz.tmall.com
*.bbq.tmall.com
*.beta-sale.tmall.com
*.bot.tmall.com
*.brand-sale.tmall.com
*.buy.tmall.com
*.buy2.tmall.com
*.carts2.tmall.com
*.cbb.tmall.com
*.cbbs.tmall.com
*.cbs.tmall.com
*.cf.tmall.com
*.chatanywaylookup-coin.tmall.com
*.click.tmall.com
*.coach.tmall.com
*.compass.tmall.com
*.consultation.tmall.com
*.cps.tmall.com
*.cs.tmall.com
*.dchain-api-proxy.tmall.com
*.dchain.tmall.com
*.deploy.tmall.com
*.detail.tmall.com
*.dian.tmall.com
*.engine.tmall.com
*.ews.tmall.com
*.fang.tmall.com
*.fans.tmall.com
*.fc.tmall.com
*.fenxiao.tmall.com
*.fuwu.tmall.com
*.gateway.tmall.com
*.global.tmall.com
*.gongxiao.tmall.com
*.gp.tmall.com
*.idestudio.tmall.com
*.ifpoperate.tmall.com
*.import.tmall.com
*.industry-workbench.tmall.com
*.insight-engine.tmall.com
*.invoice.tmall.com
*.iot-debug-center.tmall.com
*.ipublish.tmall.com
*.item.tmall.com
*.jdy.tmall.com
*.logadmin.tmall.com
*.login.tmall.com
*.lsy.tmall.com
*.m.tmall.com
*.machining.tmall.com
*.mallx.tmall.com
*.manage.tmall.com
*.manager.tmall.com
*.manual.tmall.com
*.market.tmall.com
*.mkt.tmall.com
*.msc.tmall.com
*.mx-pages.tmall.com
*.omnichannel.tmall.com
*.os.tmall.com
*.platform.tmall.com
*.portal.tmall.com
*.pos.tmall.com
*.ppxk.tmall.com
*.pre-dchain-api-proxy.tmall.com
*.pre-dchain-fc.tmall.com
*.pre-dchain.tmall.com
*.pre-industry-workbench.tmall.com
*.pre-sale.tmall.com
*.pre-weaver.tmall.com
*.pre.tmall.com
*.pre1-sale.tmall.com
*.pre2-sale.tmall.com
*.pre3-sale.tmall.com
*.pre4-sale.tmall.com
*.prepub.tmall.com
*.pricing.tmall.com
*.publish.tmall.com
*.purchase.tmall.com
*.referee.tmall.com
*.retail.tmall.com
*.rulecenter.tmall.com
*.sale.tmall.com
*.scm.tmall.com
*.scp.tmall.com
*.service.tmall.com
*.sg.tmall.com
*.simba.tmall.com
*.solution.tmall.com
*.ssc.tmall.com
*.sso.tmall.com
*.st.tmall.com
*.stargate.tmall.com
*.sugus.tmall.com
*.supplier.tmall.com
*.supply.tmall.com
*.taiwan.tmall.com
*.tarpapro.tmall.com
*.tbbs.tmall.com
*.tbmc.tmall.com
*.tc-business-plan.tmall.com
*.tc.tmall.com
*.tcbs.tmall.com
*.tcportal.tmall.com
*.test.tmall.com
*.tgc.tmall.com
*.tmcs.tmall.com
*.tmg.tmall.com
*.tmyp.tmall.com
*.txcs-business-plan.tmall.com
*.txcs.tmall.com
*.upload.tmall.com
*.wangpu.tmall.com
*.wapa.tmall.com
*.wapatest.tmall.com
*.waptest.tmall.com
*.weaver.tmall.com
*.world.tmall.com
*.ws-insight-engine.tmall.com
*.wt.tmall.com
*.wuliu.tmall.com
*.www.tmall.com
*.ya.tmall.com
showcase.display.tmall.com
*.api.m.tmall.com
*.deploy.cbbs.tmall.com
*.goalkeeper.dian.tmall.com
*.otb.cbbs.tmall.com
*.planadmin.cbbs.tmall.com
*.planweb.cbbs.tmall.com
*.poi.compass.tmall.com
*.py.tbbs.tmall.com
*.qc.cbbs.tmall.com
*.trade.fang.tmall.com
*.api.m.tmall.hk
*.cainiao.tmall.hk
*.cps.tmall.hk
*.m.tmall.hk
*.simba.tmall.hk
tmall.hk
*.tmall.hk
*.wapa.tmall.hk
Other domains in certificate