DNS Gurus
Open Cached · just now
83/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=Minnesota, O=3M Company, CN=ak-san05.3m.com
Issuer
C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo ECC Organization Validation Secure Server CA
Valid From
February 04, 2025
Valid Until
February 04, 2026 58 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA256
SHA-256 Fingerprint
43:80:F6:99:3E:B9:47:7A:98:50:31:23:0D:D5:F6:F5:C4:E0:15:AD:FB:0E:5A:85:A3:C8:5C:6C:91:47:DA:A3
Alternative Names
98 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=63072000; includeSubDomains
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Significantly strengthen CSP directives
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

98 domains
filtrete.3m.com.hk scotchgard.3m.com.hk

Other domains in certificate

post-it.3m.co.uk scotchbrand.3m.co.uk
futuro.3m.co.za post-it.3m.co.za scotchbrand.3m.co.za
ak-san05.3m.com futuro.3m.com littmann.3m.com
futuro.3maustria.at littmann.3maustria.at post-it.3maustria.at scotchbrand.3maustria.at
command.3mbelgie.be futuro.3mbelgie.be littmann.3mbelgie.be post-it.3mbelgie.be scotchbrand.3mbelgie.be
command.3mbelgique.be futuro.3mbelgique.be littmann.3mbelgique.be post-it.3mbelgique.be scotchbrand.3mbelgique.be
littmann.3mbulgaria.bg
futuro.3mcompany.jp
futuro.3mdanmark.dk littmann.3mdanmark.dk post-it.3mdanmark.dk scotchbrand.3mdanmark.dk
command.3mdeutschland.de futuro.3mdeutschland.de littmann.3mdeutschland.de post-it.3mdeutschland.de scotchbrand.3mdeutschland.de
command.3mfrance.fr littmann.3mfrance.fr post-it.3mfrance.fr scotchbrand.3mfrance.fr
command.3mhellas.gr futuro.3mhellas.gr littmann.3mhellas.gr post-it.3mhellas.gr scotch-brite.3mhellas.gr scotchbrand.3mhellas.gr
nexcare.3mindia.in
command.3mitalia.it futuro.3mitalia.it littmann.3mitalia.it post-it.3mitalia.it scotch-brite.3mitalia.it scotchbrand.3mitalia.it
post-it.3mmagyarorszag.hu
littmann.3mmaroc.ma
command.3mnederland.nl futuro.3mnederland.nl littmann.3mnederland.nl post-it.3mnederland.nl scotchbrand.3mnederland.nl
command.3mnorge.no futuro.3mnorge.no littmann.3mnorge.no post-it.3mnorge.no scotchbrand.3mnorge.no
littmann.3mpolska.pl
futuro.3mslovensko.sk littmann.3mslovensko.sk post-it.3mslovensko.sk scotchbrand.3mslovensko.sk
command.3msuomi.fi futuro.3msuomi.fi littmann.3msuomi.fi post-it.3msuomi.fi scotchbrand.3msuomi.fi
littmann.3misrael.co.il
www.littmann.co.kr
littmann.3m.co.rs
scotchbrand.3m.com.bo
command.3m.com.es
futuro.3m.com.hr littmann.3m.com.hr
futuro.3m.com.my post-it.3m.com.my scotch-brite.3m.com.my
littmann.3mphilippines.com.ph scotch-brite.3mphilippines.com.ph
littmann.3m.com.pk
futuro.3m.com.pt littmann.3m.com.pt post-it.3m.com.pt scotch-brite.3m.com.pt scotchbrand.3m.com.pt
scotchbrand.3m.com.py
command.3m.com.ro
filtrete.3m.com.sa futuro.3m.com.sa littmann.3m.com.sa
filtrete.3m.com.sg