Open
Cached
·
just now
94/100
SECURITY SCORE
Detected Technologies
AWS CloudFront
Let's Encrypt
YouTube
Google AdSense
Chili Piper
Google Tag Manager
Netlify
Azure Blob Storage
Trustpilot
Google DoubleClick
AdRoll
Active incidents
Google Analytics
Microsoft Advertising
FormAssembly
Crazy Egg
Google Conversion Tracking
Report URI
AMP
Google Static File Front End
Google API JS Client
TikTok Analytics
Google Fonts
Wistia
Twitter
LinkedIn
Zendesk
Cloudinary
MaxMind
CacheFly
Google Search
BootstrapCDN
Navattic
Facebook
Amazon S3
OneTrust
Cloudflare CDNJS
AWS
Visual Website Optimizer
Vimeo
IP-API
Akamai
Active incidents
Microsoft Clarity
MyFonts
Sentry
Google Cloud
Certificate Information
Subject
CN=primary.fa-website-prod.com
Issuer
C=US, O=Let's Encrypt, CN=E8
Valid From
March 07, 2026
Valid Until
June 05, 2026
35 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
31:DD:2F:AB:64:74:36:A4:73:11:F7:7D:EE:6E:19:BB:6B:A9:DB:91:FD:FE:40:A4:14:2B:D2:73:35:20:BF:F1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Present
accelerometer=(), camera=(), encrypted-media=(); +7 more
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Incident Reporting
mailto:[email protected]
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'issuewild' records to control wildcard certificate issuance