Open
Cached
·
just now
85/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
C=CN, ST=Shanghai, O=Shanghai Blue Cloud Technology Co., Ltd., CN=*.msn.cn
Issuer
C=US, O=DigiCert, Inc., CN=DigiCert Basic OV G2 TLS CN RSA4096 SHA256 2022 CA1
Valid From
January 29, 2026
Valid Until
January 24, 2027
293 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2C:2B:EE:AC:7D:33:FD:C3:D9:42:41:2E:E5:13:68:36:69:99:E9:D3:85:DE:D9:D4:60:DF:BA:AA:93:F0:2E:C6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=1209600; includeSubDomains; preload
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Not Authorized
(Potential misconfiguration)
CAA Issues
- • CRITICAL: Current certificate issuer 'C=US, O=DigiCert, Inc., CN=DigiCert Basic OV G2 TLS CN RSA4096 SHA256 2022 CA1' is NOT authorized by CAA records. Authorized CAs:
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts