SSL Verification Bypassed
The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.
Reason:
Hostname Mismatch - certificate is issued for www.oogarden.com, oogarden.com, media.oogarden.com, ooerp.oogarden.com, ooerpbi.oogarden.com, oonet.oogarden.com, www.oogarden.be, www.oogarden.de, www.oogarden.es, not for oogarden.de
Open
Cached
·
just now
91/100
SECURITY SCORE
Certificate Information
Subject
CN=www.oogarden.com
Issuer
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Valid From
April 29, 2025
Valid Until
May 04, 2026
111 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
91:0F:B5:0B:BC:EE:9E:A9:3B:4A:B5:C1:79:C8:79:66:8A:54:0B:8C:6F:80:2E:D8:92:59:1B:E0:C8:44:2E:57
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; base-uri; connect-src; +11 more
default-src 'self';base-uri 'self';connect-src 'self' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com www.oogarden.com:8091 www.oogarden.com:8092 www.gardented.com:8091 www.gardented.com:8092 *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com *.pinterest.com bat.bing.com bat.bing.net www.google.com www.google.fr *.doubleclick.net pagead2.googlesyndication.com tss.oogarden.com www.googleadservices.com *.adtrafficquality.google *.analytics.google.com *.google-analytics.com *.tiktok.com *.tiktokw.us *.clarity.ms *.sensefuel.live;font-src 'self' cdn.oogarden.net cdn.gardented.net *.iadvize.com fonts.gstatic.com *.sensefuel.live;form-action 'self' sogecommerce.societegenerale.eu sherlocks-payment-webinit.secure.lcl.fr payment-webinit.mercanet.bnpparibas.net *.facebook.com *.facebook.net;frame-ancestors 'self' *.datadome.co *.captcha-delivery.com ooerpbi.oogarden.com:8124 ooerpbi.oogarden.com:8125 ooerp.oogarden.com:8124 ooerp.oogarden.com:8125 *.oogarden.com *.oogarden.be *.oogarden.de *.gardented.com cdn.oogarden.net cdn.gardented.net api.gls-group.net;frame-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.captcha-delivery.com api.gls-group.net *.facebook.com *.facebook.net *.pinterest.com *.google.com *.google.fr *.adtrafficquality.google pagead2.googlesyndication.com tss.oogarden.com www.googletagmanager.com www.youtube.com *.sensefuel.live;img-src 'self' data: media.oogarden.com cdn.oogarden.net cdn.gardented.net *.facebook.com *.facebook.net *.iadvize.com bat.bing.com bat.bing.net www.google.com www.google.fr *.analytics.google.com *.google-analytics.com www.googletagmanager.com *.adtrafficquality.google www.googleadservices.com *.doubleclick.net pagead2.googlesyndication.com *.openstreetmap.org t4.my-probance.one tss.oogarden.com i.ytimg.com *.sensefuel.live;media-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.sensefuel.live;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com media.oogarden.com cdn.oogarden.net cdn.gardented.net *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com bat.bing.com bat.bing.net cmodul.solutenetwork.com *.adtrafficquality.google *.doubleclick.net pagead2.googlesyndication.com *.analytics.google.com *.google-analytics.com t4.my-probance.one tss.oogarden.com www.google.com www.google.fr www.googletagmanager.com www.gstatic.com www.youtube.com *.pinterest.com *.tiktok.com *.tiktokw.us s.pinimg.com *.clarity.ms *.sensefuel.live;style-src 'self' 'unsafe-eval' 'unsafe-inline' media.oogarden.com cdn.oogarden.net cdn.gardented.net cdnjs.cloudflare.com fonts.googleapis.com *.iadvize.com www.googletagmanager.com *.sensefuel.live;upgrade-insecure-requests;worker-src 'self' blob:;
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(self), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(self), keyboard-map=(),magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), pic-ture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), speaker-selection=()
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance