DNS Gurus
Open Cached · just now
73/100 SECURITY SCORE

Certificate Information

Subject
CN=writing.wisc.edu
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M04
Valid From
August 08, 2025
Valid Until
September 06, 2026 293 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
39:63:AD:ED:73:80:E2:B5:83:86:38:33:45:EA:C2:D2:81:6D:CC:8D:00:E4:5A:6A:A3:D1:2E:A3:02:22:20:52
Alternative Names
99 domains

Security Configuration

TLS Protocols
TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

99 domains
asm.wisc.edu cellimaging.wisc.edu chemconnect.wisc.edu commnsknowledge.wisc.edu driftless.wisc.edu eecf.wisc.edu emed.wisc.edu financeapis.wisc.edu free-expression.wisc.edu fsl.wisc.edu inclusioneducation.wisc.edu instructionalcontinuity.wisc.edu microbiology.wisc.edu patientpartnerships.wisc.edu sealc.wisc.edu smng.wisc.edu soarfamily.wisc.edu tinycasestudies.wisc.edu wiseminar.wisc.edu writing.wisc.edu *.asm.wisc.edu *.cellimaging.wisc.edu *.chemconnect.wisc.edu *.commnsknowledge.wisc.edu *.driftless.wisc.edu *.eecf.wisc.edu *.emed.wisc.edu *.financeapis.wisc.edu *.free-expression.wisc.edu *.fsl.wisc.edu *.inclusioneducation.wisc.edu *.instructionalcontinuity.wisc.edu *.microbiology.wisc.edu *.patientpartnerships.wisc.edu *.sealc.wisc.edu *.smng.wisc.edu *.soarfamily.wisc.edu *.tinycasestudies.wisc.edu *.wiseminar.wisc.edu *.writing.wisc.edu attielab.biochem.wisc.edu chinese.soarfamily.wisc.edu dinhlab.oncology.wisc.edu equity.uwpd.wisc.edu erlkonigproject.music.wisc.edu evadecovid.medicine.wisc.edu fletcher.lafollette.wisc.edu freedmanlab.soils.wisc.edu herd.engr.wisc.edu hotchkisslab.botany.wisc.edu hrycklab.medicine.wisc.edu intranet.artsdivision.wisc.edu intranet.genetics.wisc.edu kcoonlab.bact.wisc.edu konopkalab.medicine.wisc.edu learninganalytics.education.wisc.edu mappingchildrensplay.education.wisc.edu mindfuljustice.chm.wisc.edu ngolab.che.wisc.edu otegui.cellimaging.wisc.edu pcs.education.wisc.edu scdm.geography.wisc.edu sjmcccd.journalism.wisc.edu spanish.soarfamily.wisc.edu uncommonfruit.cias.wisc.edu www.waisman.wisc.edu yj.wcwpds.wisc.edu *.attielab.biochem.wisc.edu *.chinese.soarfamily.wisc.edu *.dinhlab.oncology.wisc.edu *.equity.uwpd.wisc.edu *.erlkonigproject.music.wisc.edu *.evadecovid.medicine.wisc.edu *.freedmanlab.soils.wisc.edu *.herd.engr.wisc.edu *.hotchkisslab.botany.wisc.edu *.hrycklab.medicine.wisc.edu *.intranet.artsdivision.wisc.edu *.kcoonlab.bact.wisc.edu *.konopkalab.medicine.wisc.edu *.learninganalytics.education.wisc.edu *.mappingchildrensplay.education.wisc.edu *.mindfuljustice.chm.wisc.edu *.mycareer.wsb.wisc.edu *.ngolab.che.wisc.edu *.orrocklab.zoology.wisc.edu *.otegui.cellimaging.wisc.edu *.pcs.education.wisc.edu *.scdm.geography.wisc.edu *.sjmcccd.journalism.wisc.edu *.spanish.soarfamily.wisc.edu *.uncommonfruit.cias.wisc.edu *.yj.wcwpds.wisc.edu epmgso.rso.engr.wisc.edu spieoptica.rso.engr.wisc.edu *.epmgso.rso.engr.wisc.edu *.spieoptica.rso.engr.wisc.edu

Other domains in certificate

rivers2lake.org *.rivers2lake.org