Open
Cached
·
just now
84/100
SECURITY SCORE
Certificate Information
Subject
C=US, ST=Minnesota, L=Minneapolis, O=U.S. Bank National Association, CN=elavon.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
October 09, 2025
Valid Until
November 09, 2026
301 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:08:58:1F:0E:8E:0C:1B:F9:83:EF:59:40:F4:1C:37:3B:3C:9D:B3:0B:85:E5:0F:AA:6D:D7:A4:D0:C3:22:65
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Incident Reporting
mailto:[email protected]
mailto:[email protected]
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
101 domains
elavon.com
compensation.elavon.com
gateway.elavon.com
website.elavon.com
www.elavon.com
www.gateway.elavon.com
acceptmoretransactions.com
www.acceptmoretransactions.com
anewwaytopay.com
www.anewwaytopay.com
asmarterwaytopay.com
www.asmarterwaytopay.com
bechipcardready.com
www.bechipcardready.com
besha-2ready.ca
www.besha-2ready.ca
besha-2ready.com
www.besha-2ready.com
besha2ready.ca
www.besha2ready.ca
besha2ready.com
www.besha2ready.com
beshaready.com
www.beshaready.com
payments.cenpos.com
costcopaymentprocessing.ca
www.costcopaymentprocessing.ca
costcopaymentprocessing.com
www.costcopaymentprocessing.com
costcopaymentstart.ca
www.costcopaymentstart.ca
costcopaymentstart.com
www.costcopaymentstart.com
elavon.be
www.elavon.be
elavon.ca
www.elavon.ca
elavon.co.uk
www.elavon.co.uk
elavon.de
www.elavon.de
elavon.dk
www.elavon.dk
elavon.es
www.elavon.es
elavon.eu
www.elavon.eu
elavon.ie
www.elavon.ie
elavon.lu
www.elavon.lu
elavon.no
www.elavon.no
elavon.pl
www.elavon.pl
elavon.se
www.elavon.se
elavonbrand.com
www.elavonbrand.com
elavoncommerce.com
www.elavoncommerce.com
elavonconference.com
www.elavonconference.com
enterprisepaymentstart.com
www.enterprisepaymentstart.com
experienceconverge.com
www.experienceconverge.com
merchantservicescustomercare.com
www.merchantservicescustomercare.com
opayo.co.uk
www.opayo.co.uk
paymentscoop.com
www.paymentscoop.com
paymentsecuritycenter.com
www.paymentsecuritycenter.com
paymentstart.ca
www.paymentstart.ca
paymentstart.com
www.paymentstart.com
paymentstartnow.ca
www.paymentstartnow.ca
paymentstartnow.com
www.paymentstartnow.com
safe-tsolutions.com
www.safe-tsolutions.com
smallbusinessbigambition.com
www.smallbusinessbigambition.com
tabletpayments.com
www.tabletpayments.com
takemorepayments.com
www.takemorepayments.com
traitementdespaiementsdecostco.ca
www.traitementdespaiementsdecostco.ca
usbankacceptpaymentsnow.com
www.usbankacceptpaymentsnow.com
usbankpaymentsolutions.com
www.usbankpaymentsolutions.com
usbanktabletsolutions.com
www.usbanktabletsolutions.com
usbsi.com
www.usbsi.com
Other domains in certificate