SSL Certificate Analysis for forums.towerborne.com - Security Grade & TLS Configuration

Open Cached · 8h ago

90/100 SECURITY SCORE

Certificate Information

Subject

C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=microsoft.com

Issuer

C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07

Valid From

December 08, 2025

Valid Until

June 06, 2026 157 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA384-RSA

SHA-256 Fingerprint

30:3B:FD:C2:48:EA:9C:D4:BD:F9:3A:9A:E0:AA:6F:8E:EA:B2:9B:5C:98:60:FF:6D:99:D1:B4:10:9A:A2:1A:A0

Alternative Names

173 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; script-src; style-src; +8 more

default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-MTYsMjQyLDM2LDIzMywyMzYsMjMzLDQxLDE0Mg==' blob: https://cdn.discordapp.com/animations/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://*.paypal.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; style-src 'self' 'unsafe-inline' https://cdn.discordapp.com https://*.hcaptcha.com https://hcaptcha.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; img-src 'self' blob: data: https://*.discordapp.net https://*.discordapp.com https://*.discord.com https://i.scdn.co https://i.ytimg.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com https://*.youtube.com https://*.giphy.com https://static.klipy.com https://static-cdn.jtvnw.net https://pbs.twimg.com https://assets.braintreegateway.com https://checkout.paypal.com https://api.cash.app https://*.mux.com; font-src 'self' https://fonts.gstatic.com https://cash-f.squarecdn.com https://static.discord.com https://static-edge.discord.com; connect-src 'self' https://status.discordapp.com https://status.discord.com https://support.discordapp.com https://support.discord.com https://discordapp.com https://discord.com https://discord-attachments-uploads-prd.storage.googleapis.com https://cdn.discordapp.com https://media.discordapp.net https://images-ext-1.discordapp.net https://images-ext-2.discordapp.net https://router.discordapp.net wss://*.discord.gg https://best.discord.media https://latency.discord.media wss://*.discord.media:* https://meticulous-ingest.discord.tools wss://dealer.spotify.com https://api.spotify.com https://music.amazon.com/embed/oembed https://*.sentry.io https://api.twitch.tv https://api.stripe.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.googleapis.com https://*.algolianet.com https://*.hcaptcha.com https://hcaptcha.com https://www.google.com/recaptcha/ https://*.algolia.net https://*.mux.com https://*.litix.io wss://*.shockbyte.host/ping ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' blob: disclip: https://*.discordapp.net https://*.discord.com https://*.discordapp.com https://*.youtube.com https://streamable.com https://vid.me https://twitter.com https://oddshot.akamaized.net https://*.giphy.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com https://static.klipy.com https://*.mux.com; frame-src https://discordapp.com/domain-migration discord: https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://hooks.stripe.com https://assets.braintreegateway.com https://*.paypal.com https://checkoutshopper-live.adyen.com https://kit.cash.app https://player.twitch.tv https://clips.twitch.tv/embed https://player.vimeo.com https://www.youtube.com/embed/ https://www.tiktok.com/player/ https://music.amazon.com/embed/ https://music.amazon.co.uk/embed/ https://music.amazon.de/embed/ https://music.amazon.co.jp/embed/ https://music.amazon.es/embed/ https://music.amazon.fr/embed/ https://music.amazon.it/embed/ https://music.amazon.com.au/embed/ https://music.amazon.in/embed/ https://music.amazon.ca/embed/ https://music.amazon.com.mx/embed/ https://music.amazon.com.br/embed/ https://www.youtube.com/s/player/ https://twitter.com/i/videos/ https://www.funimation.com/player/ https://www.redditmedia.com/mediaembed/ https://open.spotify.com/embed/ https://w.soundcloud.com/player/ https://audius.co/embed/ https://*.watchanimeattheoffice.com https://sessionshare.sp-int.playstation.com/ https://session-share.playstation.com/ https://localhost:* https://*.discordsays.com https://discordappcom.cloudflareaccess.com/ https://family.k-id.com/ https://d3ogqhtsivkon3.cloudfront.net/ https://*.dcams.app https://embed.music.apple.com/ https://withpersona.com https://*.withpersona.com; child-src 'self' blob: https://assets.braintreegateway.com https://*.paypal.com; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870&sentry_environment=stable; report-to csp-sentry;

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

173 domains

forums.towerborne.com www.forums.towerborne.com

Other domains in certificate

2010office.it www.2010office.it

adatum.ai www.adatum.ai

aielectionsaccord.com www.aielectionsaccord.com

www.applyxboxcreditcard.com

friday.azure.com

demo.azuremaps.com

bestxboxgames.com www.bestxboxgames.com

book.ms www.book.ms

boulder-innovations.com www.boulder-innovations.com

copilotsi.com www.copilotsi.com

docx.new www.docx.new

excel.new www.excel.new

exploresurface.com www.exploresurface.com

auth.flip.com help.flip.com info.flip.com

forzamotorsport.net rewards.forzamotorsport.net www.forzamotorsport.net

shop.gearsofwar.com

getlicensingready.com www.getlicensingready.com

www.getxboxcreditcard.com

www.gh.io

insightstomorrow.com www.insightstomorrow.com

lakeshore-retail.com www.lakeshore-retail.com

www.learnxboxcreditcard.com

dev.lobe.ai www.lobe.ai

m365copilot.com www.m365copilot.com

m365telemetry.net www.m365telemetry.net

makeitgreat.com.au www.makeitgreat.com.au

airlift.microsoft.com customers.microsoft.com microsoft.com microsoftcopilotstudio.microsoft.com mybuild.microsoft.com nonprofitcommunity.microsoft.com onegdc.microsoft.com powerusers-staging.microsoft.com powerusers.microsoft.com threatintel.microsoft.com trials.transform.microsoft.com ux.microsoft.com ux.uat.microsoft.com

microsoft365copilot.com

microsoftintegrity.com www.microsoftintegrity.com

microsoftoffice.help www.microsoftoffice.help

microsoftsolitairecollection.com www.microsoftsolitairecollection.com

mihsydney.com www.mihsydney.com

minecraftdungeons.com www.minecraftdungeons.com

minecrafteducation.net www.minecrafteducation.net

msthreatintelpodcast.com www.msthreatintelpodcast.com

new-office.it www.new-office.it

nuovo-office.it www.nuovo-office.it

o36ssupport.com

office-2013.it www.office-2013.it

apc.delve.office.com can.delve.office.com delve-gcc.office.com delve.office.com df.delve.office.com eur.delve.office.com gbr.delve.office.com gcc.delve.office.com lam.delve.office.com msit.delve.office.com nam.delve.office.com sfeur.delve.office.com sfnam.delve.office.com teamsdemo.office.com

office.download www.office.download

office.email www.office.email

office.live www.office.live

office.microsoft www.office.microsoft

office.security www.office.security

office.support www.office.support

office365-lavoro.it www.office365-lavoro.it

office365proskoly.cz www.office365proskoly.cz

office365support.ms

office365support.us

outlook-2013.it www.outlook-2013.it

outlook2013.it

playxbox.com www.playxbox.com

powerfuldevs.com

powerpoint.com www.powerpoint.com

powerpoint.new www.powerpoint.new

ppt.new www.ppt.new

pptx.new www.pptx.new

reflect.new

reflect.space

rnicrosoftsupport.com

scottandmarklearn.to www.scottandmarklearn.to

scottandmarklearnto.com www.scottandmarklearnto.com

www.thexboxcard.com

thexboxcreditcard.com www.thexboxcreditcard.com

collectors.tivan.ms

trym365.com www.trym365.com

visualstudio.blog www.visualstudio.blog

vscode-edu.com www.vscode-edu.com

vscode.education www.vscode.education

winterstarfall.com www.winterstarfall.com

word.new www.word.new