SSL Certificate Analysis for cs-dev.jp.pdcoe.dev - Security Grade & TLS Configuration | DNS Gurus

Open Cached · just now

77/100 SECURITY SCORE

Certificate Information

Subject

C=US, ST=Illinois, L=North Chicago, O=AbbVie Inc., CN=cs.pdcoe.dev

Issuer

C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid From

April 18, 2025

Valid Until

May 06, 2026 109 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

EC:A6:F1:F6:4F:B1:D2:53:11:83:96:C0:1B:9F:93:01:B9:D3:59:0C:79:FE:90:41:1B:AB:46:90:77:40:81:76

Alternative Names

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31557600

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

156 domains

allerganbeauty-dev.pdcoe.dev allerganbeauty-prod.pdcoe.dev allerganbeauty-stage.pdcoe.dev coolsculpting-dev.pdcoe.dev coolsculpting-prod.pdcoe.dev coolsculpting-stage.pdcoe.dev coolsculptinghcp-dev.pdcoe.dev coolsculptinghcp-prod.pdcoe.dev coolsculptinghcp-stage.pdcoe.dev cs-dev.pdcoe.dev cs-prod.pdcoe.dev cs-stage.pdcoe.dev cs.pdcoe.dev dev-patientfi.pdcoe.dev dev.pdcoe.dev dev2-patientfi.pdcoe.dev ha-dev.pdcoe.dev ha-prod.pdcoe.dev ha-stage.pdcoe.dev prm-dev.pdcoe.dev prm-prod.pdcoe.dev prm-stage.pdcoe.dev prod-patientfi.pdcoe.dev prod.pdcoe.dev resonic-dev.pdcoe.dev resonic-prod.pdcoe.dev resonic-stage.pdcoe.dev stage-patientfi.pdcoe.dev stage.pdcoe.dev aaous-dev.br.pdcoe.dev aaous-dev.ca.pdcoe.dev aaous-dev.in.pdcoe.dev aaous-dev.jp.pdcoe.dev aaous-dev.uk.pdcoe.dev aaous-dev2.ca.pdcoe.dev aaous-dev2.uk.pdcoe.dev aaous-prod.br.pdcoe.dev aaous-prod.ca.pdcoe.dev aaous-prod.in.pdcoe.dev aaous-prod.jp.pdcoe.dev aaous-prod.uk.pdcoe.dev aaous-stage.br.pdcoe.dev aaous-stage.ca.pdcoe.dev aaous-stage.in.pdcoe.dev aaous-stage.jp.pdcoe.dev aaous-stage.uk.pdcoe.dev cs-dev.at.pdcoe.dev cs-dev.au.pdcoe.dev cs-dev.br.pdcoe.dev cs-dev.ca.pdcoe.dev cs-dev.de.pdcoe.dev cs-dev.dk.pdcoe.dev cs-dev.fi.pdcoe.dev cs-dev.fr.pdcoe.dev cs-dev.hk.pdcoe.dev cs-dev.in.pdcoe.dev cs-dev.it.pdcoe.dev cs-dev.jp.pdcoe.dev cs-dev.kr.pdcoe.dev cs-dev.latam.pdcoe.dev cs-dev.latinoamerica.pdcoe.dev cs-dev.mena.pdcoe.dev cs-dev.mx.pdcoe.dev cs-dev.nl.pdcoe.dev cs-dev.no.pdcoe.dev cs-dev.pt.pdcoe.dev cs-dev.se.pdcoe.dev cs-dev.sg.pdcoe.dev cs-dev.th.pdcoe.dev cs-dev.uk.pdcoe.dev cs-prod.at.pdcoe.dev cs-prod.au.pdcoe.dev cs-prod.br.pdcoe.dev cs-prod.ca.pdcoe.dev cs-prod.de.pdcoe.dev cs-prod.dk.pdcoe.dev cs-prod.fi.pdcoe.dev cs-prod.fr.pdcoe.dev cs-prod.hk.pdcoe.dev cs-prod.in.pdcoe.dev cs-prod.it.pdcoe.dev cs-prod.jp.pdcoe.dev cs-prod.kr.pdcoe.dev cs-prod.latam.pdcoe.dev cs-prod.latinoamerica.pdcoe.dev cs-prod.mena.pdcoe.dev cs-prod.mx.pdcoe.dev cs-prod.nl.pdcoe.dev cs-prod.no.pdcoe.dev cs-prod.pt.pdcoe.dev cs-prod.se.pdcoe.dev cs-prod.sg.pdcoe.dev cs-prod.th.pdcoe.dev cs-prod.uk.pdcoe.dev cs-stage.at.pdcoe.dev cs-stage.au.pdcoe.dev cs-stage.br.pdcoe.dev cs-stage.ca.pdcoe.dev cs-stage.de.pdcoe.dev cs-stage.dk.pdcoe.dev cs-stage.fi.pdcoe.dev cs-stage.fr.pdcoe.dev cs-stage.hk.pdcoe.dev cs-stage.in.pdcoe.dev cs-stage.it.pdcoe.dev cs-stage.jp.pdcoe.dev cs-stage.kr.pdcoe.dev cs-stage.latam.pdcoe.dev cs-stage.latinoamerica.pdcoe.dev cs-stage.mena.pdcoe.dev cs-stage.mx.pdcoe.dev cs-stage.nl.pdcoe.dev cs-stage.no.pdcoe.dev cs-stage.pt.pdcoe.dev cs-stage.se.pdcoe.dev cs-stage.sg.pdcoe.dev cs-stage.th.pdcoe.dev cs-stage.uk.pdcoe.dev haca-dev.bg.pdcoe.dev haca-dev.br.pdcoe.dev haca-dev.cl.pdcoe.dev haca-dev.co.pdcoe.dev haca-dev.gr.pdcoe.dev haca-dev.hk.pdcoe.dev haca-dev.il.pdcoe.dev haca-dev.nl.pdcoe.dev haca-dev.ro.pdcoe.dev haca-dev.uk.pdcoe.dev haca-prod.bg.pdcoe.dev haca-prod.br.pdcoe.dev haca-prod.cl.pdcoe.dev haca-prod.co.pdcoe.dev haca-prod.gr.pdcoe.dev haca-prod.hk.pdcoe.dev haca-prod.il.pdcoe.dev haca-prod.nl.pdcoe.dev haca-prod.ro.pdcoe.dev haca-prod.uk.pdcoe.dev haca-stage.bg.pdcoe.dev haca-stage.br.pdcoe.dev haca-stage.cl.pdcoe.dev haca-stage.co.pdcoe.dev haca-stage.gr.pdcoe.dev haca-stage.hk.pdcoe.dev haca-stage.il.pdcoe.dev haca-stage.nl.pdcoe.dev haca-stage.ro.pdcoe.dev haca-stage.uk.pdcoe.dev jv-dev.cz.pdcoe.dev jv-dev2.fi.pdcoe.dev jv-prod.cz.pdcoe.dev jv-stage.cz.pdcoe.dev jv-stage.uk.pdcoe.dev

Other domains in certificate

dev-facesofnatrelle.natrelle.com prod-facesofnatrelle.natrelle.com stage-facesofnatrelle.natrelle.com