Open
Cached
·
just now
89/100
SECURITY SCORE
Certificate Information
Subject
CN=jumpcloudland.jumpcloud.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 22, 2025
Valid Until
March 22, 2026
60 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C3:B3:42:0C:09:8E:3C:37:3D:1A:2D:D8:4B:8D:C7:06:A1:50:45:CB:4A:90:D8:49:95:AF:F5:E7:C4:FE:93:C7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
default-src; script-src; img-src; +6 more
default-src 'self';script-src 'nonce-0a8851b5f96871576952be0b860175de' 'strict-dynamic' 'unsafe-eval' https: 'self' *.googletagmanager.com *.google-analytics.com;img-src 'self' data: blob: *.jumpcloud *.licdn.com *.twimg.com *.twitter.com *.facebook.com cdn.filestackcontent.com *.kaltura.com *.bizzabo.com *.ext.dev.bizzabo.com *.cloudinary.com *.google-analytics.com *.google.com.ua *.google.co.il *.google.com *.clarity.ms https://stats.g.doubleclick.net https://s3.amazonaws.com *.s3.amazonaws.com *.googleapis.com https://web-sdk.aptrinsic.com *.linkedin.com *.hsforms.com *.hubspot.com *.hubapi.com *.boomtrain.com *.luckyorange.net *.seadform.net *.adform.net *.tinypass.com *.cxense.com *.adsymptotic.com *.adnxs.com *.prfct.co *.marketingautomation.services *.yimg.com *.feathr.co *.adsrvr.org *.lfeeder.com *.quora.com *.bing.com t.co cdn.jsdelivr.net *.ft.com *.yahoo.com *.openx.net *.rubiconproject.com *.doubleclick.net *.mediaplatform.com *.staticflickr.com *.acsbapp.com *.transifex.com *.logrhythm.com logrhythm.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com amazonhr.sc.omtrdc.net *.imgur.com *.googletagmanager.com *.onetrust.com *.walls.io;style-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.jumpcloud *.licdn.com *.twimg.com *.twitter.com *.bizzabo.com *.ext.dev.bizzabo.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fast.fonts.net https://s3.amazonaws.com *.ft.com *.plyr.io *.transifex.com *.tawk.to *.zscalertwo.net *.walls.io *.googletagmanager.com;font-src 'self' data: *.jumpcloud *.bizzabo.com *.ext.dev.bizzabo.com *.akamaihd.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://web-sdk.aptrinsic.com https://js.intercomcdn.com https://dev-font-files.s3.amazonaws.com cdn.jsdelivr.net acsbapp.com *.accessibe.com *.s3.amazonaws.com *.walls.io;frame-src 'self' data: KalturaWebcast: *.jumpcloud * mailto:;connect-src 'self' *.jumpcloud https://rollout.ada.support https://bizzabo-attendees.ada.support *.ps-bizzabo.com *.twitter.com *.facebook.com *.provesrc.com *.acsbapp.com *.pingdom.net *.clarity.ms *.instana.io *.kaltura.com *.bizzabo.com bizzabo.zendesk.com *.ext.dev.bizzabo.com wss://*.ext.dev.bizzabo.com wss://*.bizzabo.com wss://*.zopim.com https://stats.g.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com wss://realtime.bizzabo.com https://s3.amazonaws.com https://eum-eu-west-1.instana.io https://ekr.zdassets.com https://api.mixpanel.com https://api-js.mixpanel.com/ https://www.filepicker.io *.hsforms.com *.linkedin.com *.hubspot.com *.hubapi.com *.boomtrain.com *.luckyorange.net *.seadform.net *.adform.net *.tinypass.com *.cxense.com *.adsymptotic.com *.adnxs.com *.prfct.co *.marketingautomation.services *.cookielaw.org *.cookiepro.com *.yimg.com *.feathr.co *.zopim.com *.mediaplatform.com *.snplow.net *.plyr.io *.cloudinary.com *.jsdelivr.net *.mux.com *.transifex.com *.transifex.net acsbapp.com melobeemusic-content-develop.s3-eu-west-1.amazonaws.com wss://seismo.whalebone.com *.refiner.io/ *.litix.io https://rs.fullstory.com cdn-ukwest.onetrust.com dpm.demdex.net amazonhr.sc.omtrdc.net *.agora.io:* *.edge.agora.io:* *.ap.sd-rtn.com wss://*.edge.agora.io:* wss://*.edge.sd-rtn.com:* *.loadmill.com https://firehose.us-east-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com *.trayapp.io https://static.ada.support *.tawk.to wss://*.tawk.to *.braze.com *.onetrust.com *.tagcommander.com *.cloudfront.net *.ada.support *.omtrdc.net cdn.privacy-mgmt.com *.googlesyndication.com *.adroll.com *.snoball.it *.walls.io;media-src 'self' *.jumpcloud blob: data: *.twitter.com *.bizzabo.com *.ext.dev.bizzabo.com https://static.zdassets.com https://media.licdn.com https://s3.amazonaws.com *.plyr.io *.cloudinary.com *.mux.com *.acsbapp.com *.logrhythm.com logrhythm.com *.cloudfront.net *.walls.io;object-src 'self' *.jumpcloud *.cloudinary.com
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports