Open
          
        
        
        
          
            
            Cached
            ·
            just now
          
        
      
    
        
          
        
        
          81/100
        
        
          SECURITY SCORE
        
      
    
  Certificate Information
        Subject
      
      
        
          CN=storage3000.is.cc
        
      
    
        Issuer
      
      
        
          C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA
        
      
    
        Valid From
      
      
        September 20, 2025
      
    
        Valid Until
      
      
        
          December 19, 2025
        
        
          
            45 days
          
        
      
    
        Public Key
      
      
        
          ECDSA
          
            256 bit
          
          
            (P-256)
          
        
        
          Adequate
        
      
    
        Signature Algorithm
      
      
        
          ECDSA-SHA384
        
        
      
    
        SHA-256 Fingerprint
      
      
        
          A2:A3:46:60:76:64:C2:FC:DF:63:D2:68:9C:9E:9C:9B:B3:79:0E:91:DF:3C:C3:5D:D1:4B:E7:08:94:0B:3D:D8
        
      
    
          Alternative Names
        
        
      Security Configuration
          TLS Protocols
        
        
          
            
              TLS 1.2
            
          
            
              TLS 1.3
            
          
        
      
          Forward Secrecy
        
        
          
            
              Supported
            
            
              (Modern clients use PFS)
            
          
        
        CAA Records (Certificate Authority Authorization)
CAA Records
        
          
            
              Not Configured
            
            (Any CA can issue certificates)
          
        
        
            
            CAA Issues
          
          - • No CAA records configured - any CA can issue certificates
 
            
            Recommendations
          
          - • Implement CAA records to restrict which CAs can issue certificates for your domain
 - • This adds an extra layer of security against unauthorized certificate issuance
 - • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
 - • Consider adding 'iodef' record to receive security incident reports