Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=imperva.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q4
Valid From
December 20, 2025
Valid Until
June 18, 2026
157 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F1:5D:B1:97:30:D5:D8:75:AF:D4:23:0A:23:D7:D8:1D:43:79:9F:A8:81:86:4F:24:49:25:61:B5:E0:B2:AC:C1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Incident Reporting
mailto:[email protected]
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 5 CAs - consider limiting to only the CAs you actively use
Subject Alternative Names
148 domains
sabre.com
*.sabre.com
airschedules.sabre.com
callcenter-8u-ut1.sabre.com
imperva-dummy-app.sabre.com
lds.sabre.com
s3analytics.sabre.com
*.cdc.sabre.com
*.cert.sabre.com
*.int.sabre.com
*.prod.sabre.com
*.profiles.sabre.com
*.rail.sabre.com
*.updatesite.sabre.com
sabremosaic-api-ut1-va.cert.sabre.com
viewership.cert.sabre.com
webkm.ri.sabre.com
webux.ix.sabre.com
*.dev.aws.sabre.com
*.updatesite.cert.sabre.com
5t.avro.prod.sabre.com
airline.api.platform.sabre.com
gf.avfo.cert.sabre.com
km.avro.prod.sabre.com
nc.reaccom-manager.cert.sabre.com
webpmp.km.ri.sabre.com
*.aem1.cert.aws.sabre.com
*.aem1.dev.aws.sabre.com
*.aem2.cert.aws.sabre.com
*.ci01.cert.aws.sabre.com
*.ci02.cert.aws.sabre.com
*.ci11.cert.aws.sabre.com
*.ci11.prod.aws.sabre.com
*.ci12.cert.aws.sabre.com
*.ci12.prod.aws.sabre.com
*.ci13.cert.aws.sabre.com
*.ci14.cert.aws.sabre.com
*.dai01.cert.aws.sabre.com
*.dai02.cert.aws.sabre.com
*.dai11.prod.aws.sabre.com
*.dai12.prod.aws.sabre.com
*.dx01.cert.aws.sabre.com
*.dx02.cert.aws.sabre.com
*.dx11.cert.aws.sabre.com
*.dx11.dev.aws.sabre.com
*.dx11.prod.aws.sabre.com
*.dx12.cert.aws.sabre.com
*.dx12.prod.aws.sabre.com
*.dx13.cert.aws.sabre.com
*.dx14.cert.aws.sabre.com
*.dx21.cert.aws.sabre.com
*.dx22.cert.aws.sabre.com
*.dx23.cert.aws.sabre.com
*.dx24.cert.aws.sabre.com
*.dx31.dev.aws.sabre.com
*.dx41.dev.aws.sabre.com
*.dx51.dev.aws.sabre.com
*.dx52.dev.aws.sabre.com
*.dx53.dev.aws.sabre.com
*.dx54.dev.aws.sabre.com
*.dxci11.dev.aws.sabre.com
*.dxci31.dev.aws.sabre.com
*.shs.cert.asc.sabre.com
dx.ci21.prod.aws.sabre.com
dx.ci22.prod.aws.sabre.com
www.1s01.usc1.planning-optimization.sabre.com
*.aca.as.cert.asc.sabre.com
*.as.sswaem.cert.aws.sabre.com
*.as.sswaem.prod.aws.sabre.com
*.avri.as.cert.asc.sabre.com
*.avri.as.prod.asc.sabre.com
ascert.avix.ix-as.prod.asc.sabre.com
asdev.avix.ix-as.prod.asc.sabre.com
dxbooking-stage.aircambodia.com
dxbooking.aircambodia.com
booking.airserbia.com
dxcheckin.airserbia.com
booking.canadiannorth.com
checkin.canadiannorth.com
booking.caymanairways.com
dc-cert.caymanairways.com
dc.caymanairways.com
dcci-cert.caymanairways.com
dcci.caymanairways.com
dx-cert.checkin.caymanairways.com
dx-stage.checkin.caymanairways.com
dx.checkin.caymanairways.com
flights-cert.caymanairways.com
flights-stage.caymanairways.com
flights.caymanairways.com
apigw.lowcostil.co.il
apigw.nofeshonline.co.il
deasy.co.il
*.deasy.co.il
ldsf.sabre.co.il
ldss.sabre.co.il
metzerpre.sabre.co.il
*.sabre.co.il
checkin.airniugini.com.pg
dc.airniugini.com.pg
dx-flights.airniugini.com.pg
booking.ethiopianairlines.com
dc-cert.ethiopianairlines.com
dc.ethiopianairlines.com
dxbooking-cert.ethiopianairlines.com
dxbooking-stage.ethiopianairlines.com
dxbooking.ethiopianairlines.com
*.cert.getthere.net
*.getthere.net
imperva.com
dcci-cert.lionairthai.com
dcci.lionairthai.com
dx-cert.checkin.lionairthai.com
dx-stage.checkin.lionairthai.com
dx.checkin.lionairthai.com
dcci-cert.malindoair.com
dcci.malindoair.com
dx-cert.checkin.malindoair.com
dx-stage.checkin.malindoair.com
dx.checkin.malindoair.com
lodgeredhook.mynuvola.com
m.mynuvola.com
booking.omanair.com
bookings.omanair.com
dc-checkin.omanair.com
dc.omanair.com
dxcheckin.omanair.com
aok.app.radixxhost.com
zipappota.radixxuat.com
zipappuat.radixxuat.com
zipdcsuat.radixxuat.com
zipresuat.radixxuat.com
*.sabrehospitality.com
*.asc.synxis.com
be-cms-e2.synxis.com
be-cms-i1.synxis.com
be-e2.synxis.com
be-i1.synxis.com
*.bts.synxis.com
*.synxis.com
talknroll.pl
www.talknroll.pl
travel.tripcase.com
tripcase.com
*.tripcase.com
book.virginaustralia.com
dc.virginaustralia.com
book-dev.virginaustralia.io
Other domains in certificate