Open
Cached
·
just now
73/100
SECURITY SCORE
Certificate Information
Subject
CN=condenast.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q1
Valid From
February 11, 2025
Valid Until
March 15, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:7D:3F:6E:E2:B7:EA:0C:38:4E:CC:29:86:41:5C:28:FE:6E:80:D6:EA:C3:35:B8:4B:D7:6F:62:DE:20:65:C8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
120 domains
condenastdigital.com
*.condenastdigital.com
admagazine.com
*.admagazine.com
admagazine.fr
*.admagazine.fr
media.admagazine.fr
*.media.admagazine.fr
stag-media.admagazine.fr
*.stag-media.admagazine.fr
stag.admagazine.fr
*.stag.admagazine.fr
allure.com
*.allure.com
allurereaderschoiceawards.com
*.allurereaderschoiceawards.com
architecturaldigest.com
*.architecturaldigest.com
architecturaldigest.in
*.architecturaldigest.in
assets.architecturaldigest.in
stag-assets.architecturaldigest.in
backchannel.com
*.backchannel.com
bonappetit.com
*.bonappetit.com
cna.st
cnspotlight.com
*.cnspotlight.com
cntraveler.com
*.cntraveler.com
assets.cntraveller.in
*.assets.cntraveller.in
cntraveller.in
*.cntraveller.in
stag-assets.cntraveller.in
*.stag-assets.cntraveller.in
conde.io
*.conde.io
ads.thestudio.condenast.com
condenast.com
*.condenast.com
condenast.io
*.condenast.io
condenasthealth.com
*.condenasthealth.com
condenaststudio.com
*.condenaststudio.com
condenet.com
*.condenet.com
epicurious.com
*.epicurious.com
glamour.com
*.glamour.com
glamour.es
*.glamour.es
glamour.mx
*.glamour.mx
gq-magazine.co.uk
gq.com
*.gq.com
gqmagazine.fr
*.lacucinaitaliana.com
media.lacucinaitaliana.com
newyorker.com
*.newyorker.com
pitchfork.com
*.pitchfork.com
pitchforkmusicfestival.com
*.pitchforkmusicfestival.com
revistaad.es
*.revistaad.es
revistavanityfair.es
*.revistavanityfair.es
self.com
*.self.com
smartwaterinspiration.com
*.smartwaterinspiration.com
teenvogue.com
*.teenvogue.com
teenvogueinsider.com
*.teenvogueinsider.com
them.us
*.them.us
media.traveler.es
stag-media.traveler.es
traveler.es
*.traveler.es
vanityfair.com
*.vanityfair.com
vanityfair.fr
*.vanityfair.fr
vogue.com
*.vogue.com
vogueinternational.com
*.vogueinternational.com
wired.co.uk
*.wired.co.uk
es.wired.com
*.es.wired.com
interactive-stag.es.wired.com
*.interactive-stag.es.wired.com
interactive.es.wired.com
*.interactive.es.wired.com
media-stag.es.wired.com
*.media-stag.es.wired.com
media.es.wired.com
*.media.es.wired.com
multiverso.es.wired.com
*.multiverso.es.wired.com
stag.es.wired.com
*.stag.es.wired.com
wired.com
*.wired.com
wired.jp
*.wired.jp
stag.worldofinteriors.com
*.stag.worldofinteriors.com
worldofinteriors.com
*.worldofinteriors.com
Other domains in certificate