Open
Cached
·
just now
94/100
SECURITY SCORE
Certificate Information
Subject
CN=ethiack.com
Issuer
C=US, O=Google Trust Services, CN=WE1
Valid From
November 15, 2025
Valid Until
February 13, 2026
81 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA256
SHA-256 Fingerprint
FA:0C:F8:A5:71:71:F4:94:68:DD:21:04:E3:EE:85:F8:47:32:43:5C:D9:F5:11:BC:44:FF:08:46:B7:A8:15:F2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000; includeSubDomains;
Content-Security-Policy
Basic
base-uri; font-src; form-action; +10 more
base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com; form-action https://forms-eu1.hsforms.com; frame-ancestors 'self'; img-src 'self' data: blob: data: vercel.com https://imgsct.cookiebot.com https: https://forms-eu1.hsforms.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' vercel.live 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' https://vercel.live https://apis.google.com https://www.google.com/recaptcha/api.js https://analytics.madebyburo.com https://www.gstatic.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com *.withburo.com stats.withburo.com https://cdn.amplitude.com https://static.hotjar.com https://js-eu1.hsforms.net/forms/embed/v2.js https://plausible.io https://script.hotjar.com 'sha256-f8ltqFODI0395MnhAchJVbXWODvM6sGKuTme9IbJNW8=' 'sha256-bC55zkRuqQEBnryJgTZy0o20L2Sez0YTO2VU8jnBojM=' 'sha384-6JhLeIooaYUGkYCNgF3mULvNTXOR5cPocFbuVmcwuTWnYhbXoQb0un70Iqqjnpuv' 'sha384-RH2xicr1SKGV+hTcRIjtTIFyG9U2mVZ2y8XB9WaNwDEBnnpx42s+nk2+KR7zd3wA' 'sha384-l5GlWLwM74QcONXkSoMGTFzJCUhpg3MKymIRpUv6WPmb5OOWfbuKXDVEUjovXWgo' 'sha384-8oxzk5L33ZrBcqhxfHZGTYRp2mO11aSQxh9GPUoxH5M6BdCEZ9o7MXSF3V7WpjmQ' 'sha384-veo41uMOVkeF+FP6tuCedZm/HVSGTFZSUuWPu2yzi3Xs6WYbqZXGSE3fLrhsCF1m' 'sha384-J2XfDUuAQv4pIeg8d4/F33uTbdQeMJgfW5xJ/xPS0LC13NNIfACveksTehMnEoU/'; upgrade-insecure-requests; connect-src 'self' vercel.live https://cdn.sanity.io *.apicdn.sanity.io https://cdn.jsdelivr.net https://analytics.madebyburo.com https://unpkg.com *.pusher.com wss://ws-us3.pusher.com consentcdn.cookiebot.com stats.g.doubleclick.net analytics.google.com *.google-analytics.com *.withburo.com stats.withburo.com https://www.google.com https://plausible.io https://js-eu1.hsforms.net https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://forms-eu1.hsforms.com https://sr-client-cfg.eu.amplitude.com https://api.eu.amplitude.com https://cdn.amplitude.com https://content.hotjar.io wss://ws.hotjar.com *.hotjar.com https://vc.hotjar.io; media-src 'self'; worker-src * blob:;;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
digicert.com
; cansignhttpexchanges=yes
letsencrypt.org
pki.goog
; cansignhttpexchanges=yes
ssl.com
comodoca.com
Wildcard CAs
comodoca.com
digicert.com
; cansignhttpexchanges=yes
letsencrypt.org
pki.goog
; cansignhttpexchanges=yes
ssl.com
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 5 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts