Open
Cached
·
just now
54/100
SECURITY SCORE
Certificate Information
Subject
C=CH, ST=Genève, O=CERN Organisation Européenne pour la Recherche Nucléaire, CN=www.cern.ch
Issuer
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA
Valid From
November 20, 2024
Valid Until
November 18, 2025
Expired
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E1:FC:86:04:B7:F0:BF:14:DE:30:55:CA:53:0A:46:6E:D1:A5:65:37:16:83:1F:46:C0:BB:72:0D:2D:11:52:6D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.0
TLS 1.1
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
- • TLS 1.1 is deprecated and should be disabled
- • TLS 1.0 is deprecated and should be disabled
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
107 domains
nic.cern
about.cern
accelerating-news.eu
acceleratingnews.eu
accelerators.cern
againstcovid19.cern
alice.cern
ams02.space
www.ams02.space
antimatter.cern
arts.cern
www.arts.cern
at.cern
atlas.cern
www.atlas.cern
awake.cern
beamlineforschools.cern
beams.cern
belgium.cern
careers.cern
aliceinfo.cern.ch
*.app.cern.ch
*.apptest.cern.ch
bulletinserv.cern.ch
cern.ch
dashb-cms-vo-feed.cern.ch
*.docs.cern.ch
espace.cern.ch
espace2013.cern.ch
exsp2owa.cern.ch
groups.cern.ch
info.cern.ch
monit.cern.ch
pensionfund.cern.ch
pwa.cern.ch
quantum.cern.ch
search.cern.ch
social.cern.ch
*.web.cern.ch
*.webtest.cern.ch
www.cern.ch
cern.int
www.cern.int
cern70.cern
cernandsocietyfoundation.cern
chis.cern
cixp.net
www.cixp.net
clear.cern
clic.cern
cms.cern
computing.cern
cosmicrays.cern
darkmatter.cern
education.cern
engineering.cern
environment.cern
europeanstrategy.cern
experiments.cern
flair.cern
fluka.cern
giving.cern
higgsboson.cern
home.cern
www.home.cern
hse.cern
ideasquare.cern
ifast-project.eu
internationalrelations.cern
ippog.org
isolde.cern
jobs.cern
knowledge.cern
kt.cern
learn.cern
lhc.cern
library.cern
medicis.cern
news.cern
newsroom.cern
norway.cern
open-quantum-institute.cern
opendays.cern
openlab.cern
openscience.cern
opensource.cern
oqi.cern
particles.cern
physics.cern
press.cern
quantum.cern
science.cern
sciencegateway.cern
scientific-info.cern
sparks.cern
staff-association.cern
standardmodel.cern
supersymmetry.cern
teachers.cern
technology.cern
theory.cern
united-states.cern
ventureconnect.cern
visit.cern
voisins.cern
webfest.cern
www.cern
Other domains in certificate