DNS Gurus
Open Cached · just now
86/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=New York, L=New York, O=Yahoo Holdings Inc., CN=*.yahoo.com
Issuer
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA
Valid From
November 05, 2025
Valid Until
December 24, 2025 47 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:01:48:52:B5:A1:C6:2A:ED:8B:19:DB:A4:9A:CE:17:C5:56:86:40:67:E3:B6:AD:3B:0B:AF:74:30:5F:89:08
Alternative Names
85 domains

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)
Warnings
  • • TLS 1.1 is deprecated and should be disabled
  • • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
*.yahoo.com *.activity.yahoo.com *.antispam.yahoo.com *.autos.yahoo.com *.calendar.yahoo.com *.celebrity.yahoo.com *.commerce.yahoo.com *.cricket.yahoo.com *.dht.yahoo.com *.dispatcher.yahoo.com *.fantasysports.yahoo.com *.finance.yahoo.com *.games.yahoo.com *.geo.yahoo.com *.groups.yahoo.com *.iris.yahoo.com *.lifestyle.yahoo.com *.m.yahoo.com *.mail.yahoo.com *.media.yahoo.com *.messenger.yahoo.com *.mobile.yahoo.com *.movies.yahoo.com *.msg.yahoo.com *.mujer.yahoo.com *.music.yahoo.com *.my.yahoo.com *.news.yahoo.com *.newsletters.yahoo.com *.notepad.yahoo.com *.safely.yahoo.com *.screen.yahoo.com *.search.yahoo.com *.secure.yahoo.com *.shine.yahoo.com *.sports.yahoo.com *.style.yahoo.com *.test-newsletters.yahoo.com *.travel.yahoo.com *.tripod.yahoo.com *.tv.yahoo.com *.video.yahoo.com *.weather.yahoo.com *.www.yahoo.com *.xobni.yahoo.com *.ybp.yahoo.com *.yql.yahoo.com *.ysm.yahoo.com admetrics.uadapp.yahoo.com api.digitalhomeservices.yahoo.com br.financas.yahoo.com ca.rogers.yahoo.com commsdata.api.yahoo.com de.kino.yahoo.com de.nachrichten.yahoo.com es-us.finanzas.yahoo.com es-us.noticias.yahoo.com es-us.vida-estilo.yahoo.com fr-ca.rogers.yahoo.com next.health.yahoo.com next.tech.yahoo.com video-api.sapi.yahoo.com *.api.fantasysports.yahoo.com *.commsdata.api.yahoo.com *.email.cc.yahoo.com *.football.fantasysports.yahoo.com *.gcp.mail.yahoo.com *.mailplus.mail.yahoo.com *.mg.mail.yahoo.com *.overview.mail.yahoo.com *.shopping.comms.yahoo.com *.sync.mail.yahoo.com *.tw.campaign.yahoo.com *.vto.commerce.yahoo.com gallery.tv.widgets.yahoo.com video.media.yql.yahoo.com

Other domains in certificate

o.aolcdn.com s.aolcdn.com
cdn.js7k.com
cdn.launch3d.com
*.sombrero.yahoo.net
*.yahooapis.com
s.yimg.com
ymail.com *.ymail.com