Open
Cached
·
just now
89/100
SECURITY SCORE
Certificate Information
Subject
CN=*.etap.com
Issuer
C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
Valid From
April 22, 2025
Valid Until
May 12, 2026
116 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:CF:74:04:10:3C:5E:EB:83:7B:53:DE:63:C5:04:83:5B:27:6F:0B:B1:14:C8:95:53:1F:3D:48:2A:09:EC:DA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Basic
default-src; script-src; style-src; +8 more
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: data: blob: mediastream:; script-src 'self' blob: mediastream: https://platform-api.sharethis.com/js/sharethis.js https://script.crazyegg.com/pages/scripts/0076/0191.js https://secure.path5wall.com/js/196367.js https://cdn.jsdelivr.net/npm/swiper@9/swiper-bundle.min.js https://www.googletagmanager.com/gtag/js https://code.jquery.com/jquery-3.7.1.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/2.1.2/TweenMax.min.js https://cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.6/ScrollMagic.min.js https://cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.6/plugins/animation.gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.js https://js.createsend1.com/javascript/copypastesubscribeformlogic.js https://buttons-config.sharethis.com/js/645d0c51ae583700197b9a7f.js https://script.crazyegg.com/pages/versioned/common-scripts/bd50d2cb21d6f62c8d2746fa4e34ac1e.js https://t.sharethis.com/1/k/t.dhj https://platform-api.sharethis.com/panorama.js https://cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.7/plugins/debug.addIndicators.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.8/jquery.validate.min.js https://cdn.datatables.net/1.10.25/js/jquery.dataTables.min.js https://cdn.datatables.net/searchpanes/1.3.0/js/dataTables.searchPanes.min.js https://cdnjs.cloudflare.com/ajax/libs/list.js/1.5.0/list.min.js https://www.googletagmanager.com/gtm.js https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js https://www.google-analytics.com/analytics.js https://bat.bing.com/bat.js https://bat.bing.com/p/action/5707381.js https://www.clickcease.com/monitor/stat.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.8.1/jquery.validate.js https://ajax.aspnetcdn.com/ajax/mvc/4.0/jquery.validate.unobtrusive.min.js https://www.google.com/recaptcha/api.js https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js https://cdnjs.cloudflare.com/ajax/libs/bootstrap-3-typeahead/4.0.2/bootstrap3-typeahead.js https://cdn.jsdelivr.net/npm/[email protected]/dist/lazyload.min.js https://www.google.com/cse/cse.js https://cse.google.com/cse/cse.js *.crazyegg.com *.clickcease.com https://cdn.jsdelivr.net/npm/[email protected]/dist/jquery.validate.min.js https://sandbox.bluesnap.com/web-sdk/5/bluesnap.js https://sandpay.bluesnap.com/web-sdk/5.4.0/hpf.js https://sandpay.bluesnap.com/web-sdk/5.4.0/hpfCvvInput.js https://sandpay.bluesnap.com/web-sdk/5.4.0/hpfExpInput.js https://sandpay.bluesnap.com/web-sdk/5.4.2/hpfExpInput.js https://sandpay.bluesnap.com/web-sdk/5.4.2/hpf.js https://sandpay.bluesnap.com/web-sdk/5.4.2/hpfCvvInput.js https://www.google.com/cse/ https://www.google.com/cse/* https: https://cdn.insight.sitefinity.com https://dec.azureedge.net js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net *.google-analytics.com *.eloqua.com *.en25.com web-chat.nativechat.com cdn.ampproject.org 'nonce-6bb3ceff-8df9-4b7a-8b03-6e4daa8cb3f9'; style-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: data: blob: mediastream: https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com; img-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https: http: mediastream: www.googletagmanager.com https://cdn.insight.sitefinity.com https://dec.azureedge.net track.hubspot.com js.hsleadflows.net forms.hsforms.com *.google-analytics.com *.eloqua.com web-chat.nativechat.com; font-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: http: blob: mediastream:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: data: blob: mediastream: forms.hsforms.com web-chat.nativechat.com; connect-src 'self' data: 'unsafe-inline' 'unsafe-eval' https: http: blob: mediastream: www.googletagmanager.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com forms.hubspot.com *.hsforms.com *.google-analytics.com; media-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https: http: mediastream:; child-src 'self' 'unsafe-inline' 'unsafe-eval' https: http: data: blob: mediastream: web-chat.nativechat.com; form-action 'unsafe-inline' 'unsafe-eval' https: http: 'self' data: blob: mediastream:; object-src 'unsafe-inline' 'unsafe-eval' 'self' blob: mediastream:
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports