SSL Certificate Analysis for connect.samadam.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Certificate Information

Subject

CN=senzapensieri.com

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

February 06, 2026

Valid Until

May 07, 2026 87 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

3C:27:27:76:66:B8:5B:96:5B:03:29:79:50:6D:79:0A:35:1B:A0:3C:91:C4:73:42:6E:00:87:D0:73:25:E4:FD

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

samadam.com *.samadam.com *.anyconnect.samadam.com *.connect.samadam.com *.gateway.samadam.com *.mailgate.samadam.com *.mx4.samadam.com *.officevpn.samadam.com *.portal.samadam.com *.rds.samadam.com *.rds1.samadam.com *.rdweb.samadam.com *.remote.samadam.com *.remoto.samadam.com *.secure.samadam.com *.smtp01.samadam.com *.ssl.samadam.com *.studentsvpn.samadam.com *.vpn.samadam.com *.vpn1.samadam.com *.vpn2.samadam.com *.vpnssl.samadam.com *.ww25.samadam.com *.ww38.samadam.com

Other domains in certificate

*.aldi-seeded-watermelon.expon.cfd *.events-at-ucsd-today.expon.cfd expon.cfd *.expon.cfd *.persona-5-almighty-skills.expon.cfd

*.4a0328bd-430b-4915-b576-ef30d499f6c5.ktmt.com *.app.ktmt.com *.awba.ktmt.com *.cicd.ktmt.com *.cit.ktmt.com *.co.ktmt.com *.demo.ktmt.com *.dev.ktmt.com *.galeria.ktmt.com *.img.ktmt.com *.is.ktmt.com *.jenkins.ktmt.com ktmt.com *.ktmt.com *.mx.ktmt.com *.old.ktmt.com *.pipeline.ktmt.com *.qkzuxytoleqpvw.ktmt.com *.random.ktmt.com *.soft.ktmt.com *.users.ktmt.com *.wildcard.ktmt.com *.ww1.ktmt.com

luxuryvacays.com *.luxuryvacays.com *.mailer.luxuryvacays.com *.www.luxuryvacays.com

*.7d83442d-7e5d-4a37-8962-0b7e74da82c5.righteousbratva.com *.metric.righteousbratva.com righteousbratva.com *.righteousbratva.com *.www.righteousbratva.com