73/100 SECURITY SCORE

Certificate Information

Subject
CN=*.aaslanguagedatabase.wisc.edu
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M01
Valid From
October 21, 2025
Valid Until
November 19, 2026 368 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
13:63:78:55:30:A3:32:F6:8F:7E:46:E2:FB:6D:3E:C5:0D:C3:64:A1:56:8B:D4:F2:85:6C:9C:22:45:99:77:8D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

98 domains
cdmc.wisc.edu cmb.wisc.edu equilibriumecon.wisc.edu highroad.wisc.edu shopuwplus.wisc.edu *.aaslanguagedatabase.wisc.edu *.acsss.wisc.edu *.agroecology.wisc.edu *.ahec.wisc.edu *.amindian.wisc.edu *.anthropology.wisc.edu *.aoa.wisc.edu *.apr.wisc.edu *.apsi.wisc.edu *.are.wisc.edu *.artexchange.wisc.edu *.arts.wisc.edu *.artsdivision.wisc.edu *.asianamerican.wisc.edu *.bact.wisc.edu *.badgerrotc.wisc.edu *.bas.wisc.edu *.bascom.wisc.edu *.bif.wisc.edu *.boc.wisc.edu *.broaderimpacts.wisc.edu *.bse.wisc.edu *.btp.wisc.edu *.bussvc.wisc.edu *.campussupervisorsnetwork.wisc.edu *.cancer.wisc.edu *.cancerbiology.wisc.edu *.careerfair.wisc.edu *.careers.wisc.edu *.ccas.wisc.edu *.cdmc.wisc.edu *.ceo.wisc.edu *.cessi.wisc.edu *.cfli.wisc.edu *.cipe.wisc.edu *.cmb.wisc.edu *.compliance.wisc.edu *.connecthealth.wisc.edu *.connections.wisc.edu *.continuingstudies.wisc.edu *.creeca.wisc.edu *.creme.wisc.edu *.criminaljustice.wisc.edu *.crowe.wisc.edu *.equilibriumecon.wisc.edu *.highroad.wisc.edu *.shopuwplus.wisc.edu edrl.engr.wisc.edu hougen-lectureship.che.wisc.edu qbit.waisman.wisc.edu *.advising.continuingstudies.wisc.edu *.anitathompson.bse.wisc.edu *.baumlab.botany.wisc.edu *.bcrf.biochem.wisc.edu *.browlab.bmolchem.wisc.edu *.cameron.botany.wisc.edu *.cares.continuingstudies.wisc.edu *.cec.ccas.wisc.edu *.cessi.creeca.wisc.edu *.choi.bse.wisc.edu *.circle.anthropology.wisc.edu *.cs.connections.wisc.edu *.edrl.engr.wisc.edu *.emshwiller.botany.wisc.edu *.fernandez.botany.wisc.edu *.forms.bussvc.wisc.edu *.guide.cfli.wisc.edu *.harrisonlab.bmolchem.wisc.edu *.henzlerwildman.biochem.wisc.edu *.hougen-lectureship.che.wisc.edu *.hulllab.bmolchem.wisc.edu *.intranet.bascom.wisc.edu *.janvansina.africa.wisc.edu *.jordonthaden.botany.wisc.edu *.kecklab.bmolchem.wisc.edu *.livingcollection.botany.wisc.edu *.mcculloh.botany.wisc.edu *.mosherlab.bmolchem.wisc.edu *.nic.botany.wisc.edu *.outreach.bact.wisc.edu *.qbit.waisman.wisc.edu *.slp.cfli.wisc.edu *.spalding.botany.wisc.edu *.strierlab.anthropology.wisc.edu *.test10.campuscms.wisc.edu *.test5.campuscms.wisc.edu *.test6.campuscms.wisc.edu *.test7.campuscms.wisc.edu *.test8.campuscms.wisc.edu *.test9.campuscms.wisc.edu *.wallerlab.botany.wisc.edu *.wiedenhoeftlab.botany.wisc.edu *.wright.biochem.wisc.edu