SSL Certificate Analysis for pre.datascience.us-phoenix-1.oci.oraclecloud.com - Security Grade & TLS Configuration | DNS Gurus

Open Cached · just now

76/100 SECURITY SCORE

Certificate Information

Subject

C=US, ST=California, L=Redwood City, O=Oracle Corporation, CN=*.alx.us-phoenix-1.oci.oraclecloud.com

Issuer

C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid From

September 19, 2025

Valid Until

September 18, 2026 313 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

C6:6C:04:C3:EF:2D:A3:62:60:D8:1F:C8:E7:DA:92:CB:1E:0D:10:9C:35:0C:68:2F:17:ED:BA:47:7C:F5:6A:4E

Alternative Names

Security Configuration

TLS Protocols

TLS 1.2

Forward Secrecy

Limited (Check cipher configuration)

Warnings

• TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains;

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

76 domains

*.octo.oraclecloud.com *.odin.oraclecloud.com *.tracing.oraclecloud.com *.channels.ocs.oraclecloud.com *.lrs.oci.oraclecloud.com *.accountadmintool.us-phoenix-1.oci.oraclecloud.com *.alx.us-phoenix-1.oci.oraclecloud.com *.apps.us-phoenix-1.ocs.oraclecloud.com *.cdexhub.us-phoenix-1.oci.oraclecloud.com *.channels.us-phoenix-1.ocs.oraclecloud.com *.clusterplacementgroups.us-phoenix-1.oci.oraclecloud.com *.cmdb.us-phoenix-1.oci.oraclecloud.com *.data-security.us-phoenix-1.oci.oraclecloud.com *.datascience.us-phoenix-1.oci.oraclecloud.com *.dcitool.us-phoenix-1.oci.oraclecloud.com *.desktops.us-phoenix-1.oci.oraclecloud.com *.draas.us-phoenix-1.oci.oraclecloud.com *.engage.us-phoenix-1.oci.oraclecloud.com *.fams.us-phoenix-1.oci.oraclecloud.com *.feedback.us-phoenix-1.oci.oraclecloud.com *.generativeai.us-phoenix-1.oci.oraclecloud.com *.guardrails.us-phoenix-1.oci.oraclecloud.com *.health.us-phoenix-1.oci.oraclecloud.com *.healthchecks.us-phoenix-1.oci.oraclecloud.com *.incidentmanagement.us-phoenix-1.oci.oraclecloud.com *.lake.us-phoenix-1.oci.oraclecloud.com *.launchpad.us-phoenix-1.oci.oraclecloud.com *.mcms.us-phoenix-1.oci.oraclecloud.com *.notification.us-phoenix-1.oci.oraclecloud.com *.ocean.us-phoenix-1.ocs.oraclecloud.com *.ocvps.us-phoenix-1.oci.oraclecloud.com *.omnichannel.us-phoenix-1.oci.oraclecloud.com *.osp.us-phoenix-1.oci.oraclecloud.com *.process.us-phoenix-1.oci.oraclecloud.com *.production.us-phoenix-1.oci.oraclecloud.com *.puffin.us-phoenix-1.oci.oraclecloud.com *.query-next.us-phoenix-1.oci.oraclecloud.com *.rasl.us-phoenix-1.oci.oraclecloud.com *.reset.us-phoenix-1.oci.oraclecloud.com *.spectra.us-phoenix-1.ocs.oraclecloud.com *.streaming-alpha.us-phoenix-1.oci.oraclecloud.com *.streaming-beta.us-phoenix-1.oci.oraclecloud.com *.streaming-delta.us-phoenix-1.oci.oraclecloud.com *.streaming-preview.us-phoenix-1.oci.oraclecloud.com *.streaming.us-phoenix-1.oci.oraclecloud.com *.ulni.us-phoenix-1.oci.oraclecloud.com *.yum.us-phoenix-1.oci.oraclecloud.com *.api.weblogicmanagement.us-phoenix-1.oci.oraclecloud.com *.cell0.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell1.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell2.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell3.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell4.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell5.containerengine.us-phoenix-1.oci.oraclecloud.com *.cell6.containerengine.us-phoenix-1.oci.oraclecloud.com *.central.puffin.us-phoenix-1.oci.oraclecloud.com *.cp.cdsaas.us-phoenix-1.oci.oraclecloud.com *.cp.gdp.us-phoenix-1.oci.oraclecloud.com *.cp.postgresql.us-phoenix-1.oci.oraclecloud.com *.dev.cmdb.us-phoenix-1.oci.oraclecloud.com *.dev.rasl.us-phoenix-1.oci.oraclecloud.com *.internal.redis.us-phoenix-1.oci.oraclecloud.com *.mcms.digitalassistant.us-phoenix-1.oci.oraclecloud.com *.osmh.yum.us-phoenix-1.oci.oraclecloud.com *.plugin.weblogicmanagement.us-phoenix-1.oci.oraclecloud.com *.pre.datascience.us-phoenix-1.oci.oraclecloud.com *.preprod.desktops.us-phoenix-1.oci.oraclecloud.com *.production.apigateway.us-phoenix-1.oci.oraclecloud.com *.regional.puffin.us-phoenix-1.oci.oraclecloud.com *.rpa.integration.us-phoenix-1.ocp.oraclecloud.com *.stage.apigateway.us-phoenix-1.oci.oraclecloud.com *.stg.cmdb.us-phoenix-1.oci.oraclecloud.com *.test.desktops.us-phoenix-1.oci.oraclecloud.com *.api.test.desktops.us-phoenix-1.oci.oraclecloud.com *.published.test.desktops.us-phoenix-1.oci.oraclecloud.com *.ui.rpa.integration.us-phoenix-1.ocp.oraclecloud.com