Open
Cached
·
just now
82/100
SECURITY SCORE
Certificate Information
Subject
CN=avivacorporateplatform.co.uk
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M02
Valid From
March 09, 2025
Valid Until
April 08, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D3:DC:DB:0A:05:76:74:34:32:CE:2D:BC:A2:14:9F:6F:97:07:81:24:26:C2:8C:91:4C:EC:52:32:E7:E4:6E:D7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
69 domains
friendslife.com
aviva-for-advisers.co.uk
aviva-for-messaging.co.uk
aviva.ca
bcmotorcycle.aviva.ca
aviva.ie
avivaae.co.uk
avivaavantage.ca
avivaavantage.com
avivacanada.com
bic.avivacanada.com
blog.avivacanada.com
combinedpolicy.avivacanada.com
commerciallines.avivacanada.com
defensibleclaims.avivacanada.com
leisureandlifestyle.avivacanada.com
m.avivacanada.com
avivacommunityfund.co.uk
avivacorporateplatform.co.uk
avivacustomer.co.uk
avivadigitaldivision.ca
avivaeserve.co.uk
avivahealthandwellbeing.co.uk
monaviva.avivainsurance.ca
qa.avivainsurance.ca
avivainvestors.at
avivainvestors.be
avivainvestors.ca
avivainvestors.ch
avivainvestors.co.uk
aimstr.avivainvestors.com
at.avivainvestors.com
au.avivainvestors.com
avivainvestors.com
be.avivainvestors.com
ca.avivainvestors.com
ch.avivainvestors.com
de.avivainvestors.com
es.avivainvestors.com
fi.avivainvestors.com
fr.avivainvestors.com
ie.avivainvestors.com
it.avivainvestors.com
lu.avivainvestors.com
nl.avivainvestors.com
no.avivainvestors.com
avivainvestors.com.au
avivainvestors.de
avivainvestors.es
avivainvestors.ie
avivainvestors.it
avivainvestors.lu
avivainvestors.nl
avivainvestors.se
avivainvestors.sg
avivainvestors.tel
avivamymoney.co.uk
avivapartner.ca
avivatraders.com
avivatransfers.co.uk
avivatriallawyers.com
avivatrusteeplatform.co.uk
controlyourpension.com
hibernian.ie
hibernianaviva.ie
partner.qs.online-insure.co.uk
partenaireaviva.ca
qaavantage.ca
quotemehappy.claims
Other domains in certificate