DNS Gurus
Cached · just now
82/100 SECURITY SCORE

Certificate Information

Subject
CN=*.io-media.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q3
Valid From
July 27, 2025
Valid Until
August 28, 2026 224 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:7B:78:77:F6:0D:7A:4D:13:46:77:6C:F7:35:7E:26:B4:CB:1C:42:15:9C:16:76:F3:F7:9F:9A:F9:4E:6E:8A
Alternative Names
85 domains

Security Configuration

TLS Protocols
TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=300
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Excellent
Deny
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
am.ticketmaster.com beta.ticketmaster.com embed.ticketmaster.com harrypotter.ticketmaster.com identity-dev.ticketexchangebyticketmaster.com identity-preprod.ticketmaster.com identity.ticketexchangebyticketmaster.com identity.ticketmaster.com m.ticketmaster.com maps.ticketmaster.com mobile-app.ticketmaster.com my.ticketmaster.com preprod-verifiedfan.ticketmaster.com reggie-qa.ticketmaster.com reggie-stage.ticketmaster.com reggie.ticketmaster.com services.ticketmaster.com verifiedfan.ticketmaster.com vf.ticketmaster.com www.ticketmaster.com www1.ticketmaster.com content.resale.ticketmaster.com embed.stage.ticketmaster.com preprod.vf.ticketmaster.com www1.stage.ticketmaster.com www1.testingprod.ticketmaster.com

Other domains in certificate

*.io-media.com
concerts1.livenation.com concerts1.stage.livenation.com identity.concerts.livenation.com identity.livenation.com m.concerts.livenation.com mobile-app.livenation.com my.livenation.com settlement.livenation.com
identity.ontouraccess.com
wb-test.vf.pub-tmaws.io
shaniatickets.com
tickets.taylorswift.com
identity.ticketmaster.ca m.ticketmaster.ca my.ticketmaster.ca www1.ticketmaster.ca
m.ticketmaster.co.nz
m.ticketmaster.co.uk theatre.ticketmaster.co.uk *.ticketmaster.co.uk
m.ticketmaster.com.au
m.ticketmaster.com.mx
telekom.ticketmaster.de
m.ticketmaster.ie *.ticketmaster.ie
alpha-ca.ticketmaster.net embed-alpha.ticketmaster.net embed-int.ticketmaster.net embed1-alpha.ticketmaster.net embed2-alpha.ticketmaster.net embed3-alpha.ticketmaster.net embed99-alpha.ticketmaster.net identity-int.ticketmaster.net micro.ticketmaster.net *.nonprod.ticketmaster.net services-ijash.ticketmaster.net services-intqa.ticketmaster.net services-preprod.ticketmaster.net services-qa.ticketmaster.net
identity-dev.ticketsnow.com identity.ticketsnow.com
*.tmconst.com
beta.tmol.co maps.tmol.co mapsapi.tmol.co mapsint.tmol.co mapsintqa.tmol.co mapsqa.tmol.co s2.tmol.co venue.tmol.co venueint.tmol.co venueqa.tmol.co
maps.tmol.io mapsapi.tmol.io *.s.tmol.io s2.tmol.io venue.tmol.io
identity.tmverifiedfan.com