Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
C=US, ST=California, L=San Francisco, O=Salesforce, Inc., CN=san-17-s10.tlsprovisioning.exacttarget.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
July 15, 2026
Valid Until
January 29, 2027
174 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F1:54:68:3A:60:07:A3:D8:F6:86:8A:F0:81:20:39:E5:23:CF:81:F9:2C:D0:45:65:03:40:01:83:91:D8:4E:7B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
78 domains
image.humanresources.fox.com
image.e.onlineprograms.adelphi.edu
image.indiana-email.aes.com
image.alrayanbankemail.com
image.e.degrees.alverno.edu
image.ch.astara.com
image.cobranzas.bbva.pe
image.news.belezanaweb.com.br
image.news.boticarioprev.com.br
image.e.online.brenau.edu
image.send.candid.org
image.email.capitalmedicareplans.com
image.mail.cebroker.com
image.devialet.chalhoub.com
image.theskincareedition.chalhoub.com
image.info.chery.pe
image.info.christofle.com
image.impact.coh.org
image.ae.colgatepalmolive.com
image.ap.colgatepalmolive.com
image.eu.colgatepalmolive.com
image.la.colgatepalmolive.com
image.info.colsanitasseguros.com
image.advancement.conncoll.edu
image.e.online.csp.edu
image.web.cvs.com
image.cvsclinicalstudies.com
image.info.deine-weiterbildung.de
image.comm.dell.com
image.em.dorna.com
image.drivers-toyotaims.com
image.e.careerboost.du.edu
image.email-navistar.com
san-17-s10.tlsprovisioning.exacttarget.com
image.info.fiat.com.co
image.connect.fiu.edu
image.sibo.fluidra.nl
image.info.fuso.pe
image.vn.fwd.com
image.info.gac-motor.pe
image.e.accelerated.gmercyu.edu
image.ca.h.care
image.herd.hilltop.com
image.honda-australia.com
image.info.hyundaicolombia.co
image.comms.i-med.co.nz
image.emailinfo.inspirebrands.com
image.info.jmc.com.co
image.email.online.jwu.edu
image.email.katespadeoutlet.com
image.info.kia.pe
image.informacion.mazda.co
image.email.me-farmrio.com
image.news.mercatoemcasa.com.br
image.work.metamail.com
image.mail.mgmotor.ch
image.rejoyn.otsuka-oph.com
image.rejoynhcp.otsuka-oph.com
image.majordepressiondisconnect.otsuka-us.com
image.ndxcon.otsuka-us.com
image.ndxhcp.otsuka-us.com
image.info.peugeot-peru.pe
image.info.peugeot.com.co
image.info.prudential.com.hk
image.hello.prudential.com.my
image.radioshacknews.com
image.info.ram.com.co
image.e.info.risepoint.com
image.e.online.rivier.edu
image.sfme.rmit.edu.au
image.email.solarcity.co.nz
image.stellantisusfleet.com
image.stratstone.info
image.co.unicef.org
image.eca.unicef.org
image.info.volvocarcolombia.com
image.car-net.vw.ca
image.e.wmualumni.org
Other domains in certificate