SSL Certificate Analysis for m.amazon.com - Security Grade & TLS Configuration

Open Cached · just now

80/100 SECURITY SCORE

Certificate Information

Subject

CN=books.amazon.com

Issuer

C=US, O=Amazon, CN=Amazon RSA 2048 M04

Valid From

September 27, 2025

Valid Until

October 26, 2026 276 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

E8:E7:82:B2:35:F2:33:CC:34:32:44:F3:AC:E0:E6:34:D7:EA:39:06:7E:92:C3:40:76:5E:61:72:83:6C:28:CC

Alternative Names

100 domains

Security Configuration

TLS Protocols

TLS 1.0 TLS 1.1 TLS 1.2

Forward Secrecy

Limited (Check cipher configuration)

Warnings

• TLS 1.3 is not supported (recommended)
• TLS 1.1 is deprecated and should be disabled
• TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=47474747; includeSubDomains; preload

Content-Security-Policy

Weak

upgrade-insecure-requests; report-uri

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains

book-amazon.com booksamazon.com liveatamazon.com usedbooksamazon.com audible.amazon.com books.amazon.com community.amazon.com coupon.amazon.com coupons.amazon.com m.amazon.com my.amazon.com s1.amazon.com toolcrib.amazon.com video.amazon.com vine.amazon.com www.book-amazon.com www.booksamazon.com www.liveatamazon.com www.usedbooksamazon.com www.audible.amazon.com www.beauty.amazon.com www.m.amazon.com www.toolcrib.amazon.com

Other domains in certificate

amazon-ebooks.com

amazon-encyclopedia.com www.amazon-encyclopedia.com

amazonenbooks.com www.amazonenbooks.com

amazonencyclopedia.com www.amazonencyclopedia.com

amazongreenblog.com www.amazongreenblog.com

amazoniabooks.com www.amazoniabooks.com

amazonlibrarian.com www.amazonlibrarian.com

amazonlibrary.com www.amazonlibrary.com

amazonmedia.com www.amazonmedia.com

amazonmedia.net www.amazonmedia.net

amazonmediaroom.com www.amazonmediaroom.com

amazonmultimedia.com www.amazonmultimedia.com

amazonnbooks.com www.amazonnbooks.com

amazonoprahbooks.com www.amazonoprahbooks.com

amazonsbook.com www.amazonsbook.com

amazonsbooks.com www.amazonsbooks.com

amazonsebooks.com www.amazonsebooks.com

amazonsofebooks.com www.amazonsofebooks.com

amazonwinestore.com www.amazonwinestore.com

amazonwomansbooks.com www.amazonwomansbooks.com

amazoonbooks.com www.amazoonbooks.com

amazzonbooks.com www.amazzonbooks.com

book-store.com www.book-store.com

chordstrike.com www.chordstrike.com

amazon.com.bn www.amazon.com.bn

amazon.com.hk www.amazon.com.hk

enduserblog.com www.enduserblog.com

lookinsidethebook.com www.lookinsidethebook.com

searchinsidethebook.com www.searchinsidethebook.com

tool-crib.com www.tool-crib.com

toolclearance.com www.toolclearance.com

whispersync.com www.whispersync.com