SSL Certificate Analysis for sendify.dingstore.cn - Security Grade & TLS Configuration

Open Cached · just now

73/100 SECURITY SCORE

Certificate Information

Subject

C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=mail.aliyun.com

Issuer

C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024

Valid From

August 08, 2025

Valid Until

August 31, 2026 223 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

E2:7B:BF:96:23:CC:FF:92:6B:EB:4C:12:66:E4:F8:9A:4B:0E:E0:3C:25:17:28:6D:97:C8:10:AC:5D:66:88:FF

Alternative Names

221 domains

Security Configuration

TLS Protocols

TLS 1.2

Forward Secrecy

Limited (Check cipher configuration)

Warnings

• TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

221 domains

dingstore.cn sendify.dingstore.cn www.dingstore.cn mx1.sendify.dingstore.cn mx2.sendify.dingstore.cn mx3.sendify.dingstore.cn

Other domains in certificate

alimailws.alibaba-inc.com autodiscover.alibaba-inc.com ay29u.mx.alibaba-inc.com caldav.alibaba-inc.com caldav40.alibaba-inc.com caldavus.alibaba-inc.com ex-oversea.alibaba-inc.com ex.alibaba-inc.com ex40.alibaba-inc.com exmobile.alibaba-inc.com exmobile40.alibaba-inc.com exmobileus.alibaba-inc.com exus.alibaba-inc.com imap-inc.alibaba-inc.com imap.alibaba-inc.com imap40.alibaba-inc.com imapus.alibaba-inc.com ldap.alibaba-inc.com ldap40.alibaba-inc.com ldapus.alibaba-inc.com mail.alibaba-inc.com mailtry.alibaba-inc.com mailus.alibaba-inc.com mx-inc.alibaba-inc.com mx.hk.alibaba-inc.com mx1.alibaba-inc.com mxus1.alibaba-inc.com pop3.alibaba-inc.com pop40.alibaba-inc.com popus.alibaba-inc.com smtp-inc.alibaba-inc.com smtp-inner.alibaba-inc.com smtp.alibaba-inc.com smtp40.alibaba-inc.com smtpus.alibaba-inc.com webmail.alibaba-inc.com

mx1.mail.aliyun-inc.com pop3.aliyun-inc.com

acalendar.qiye.aliyun.com alimail-hybrid.aliyun.com alimei-api-40.aliyun.com alimei-api-us.aliyun.com alimei-api.aliyun.com alimei-auth.aliyun.com alimei-auth.sg.aliyun.com alimei-auth.us.aliyun.com alimei-content.aliyun.com alimei-preview.aliyun.com alimei-sub-us.aliyun.com alimei-sub.aliyun.com caldav.aliyun.com caldav.sg.aliyun.com email.aliyun.com ex.qiye.aliyun.com ex.sg.aliyun.com exmail.aliyun.com imap-inc.aliyun.com imap.aliyun.com imap.qiye.aliyun.com imap.sg.aliyun.com imaphk.qiye.aliyun.com imapv6.qiye.aliyun.com ldap.qiye.aliyun.com ldap.sg.aliyun.com mail-inc.qiye.aliyun.com mail.aliyun.com mail.qiye.aliyun.com mail.sg.aliyun.com mailbee.aliyun.com mailhelp.aliyun.com mailopen-netdisk.aliyun.com mailopen-ws.aliyun.com mailsso-beta.aliyun.com mailsso-personal.aliyun.com mailsso.aliyun.com mailsso.sg.aliyun.com mailsso.us.aliyun.com mx1.aliyun.com mx1.mail.aliyun.com mx1.mail.service.aliyun.com mx1.qiye.aliyun.com mx1.sg.aliyun.com mx2.mail.aliyun.com mx2.qiye.aliyun.com mx2.sg.aliyun.com mx3.qiye.aliyun.com pop.qiye.aliyun.com pop.sg.aliyun.com pop3.aliyun.com popv6.qiye.aliyun.com pre-alimei-api-40.aliyun.com pre-alimei-api-us.aliyun.com pre-alimei-api.aliyun.com pre-alimei-auth.aliyun.com pre-alimei-auth.sg.aliyun.com pre-alimei-auth.us.aliyun.com pre-alimei-content.aliyun.com pre-alimei-content.sg.aliyun.com pre-alimei-sub-us.aliyun.com pre-alimei-sub.aliyun.com pre-mailsso-personal.aliyun.com pre-mailsso.aliyun.com pre-mailsso.sg.aliyun.com pre-mailsso.us.aliyun.com qiye.aliyun.com smtp-inc.aliyun.com smtp.aliyun.com smtp.dm.aliyun.com smtp.ocm.aliyun.com smtp.qiye.aliyun.com smtp.sg.aliyun.com smtpdm-ap-southeast-1.aliyun.com smtpdm-ap-southeast-2.aliyun.com smtpdm-eu-central-1.aliyun.com smtpdm.aliyun.com smtphk.qiye.aliyun.com smtpv6.qiye.aliyun.com work.aliyun.com

dingstore.com sendify.dingstore.com www.dingstore.com

alimei-auth.dingtalk.com imap.em.dingtalk.com mail.dingtalk.com mailbee.dingtalk.com mx1.em.dingtalk.com mx2.em.dingtalk.com mx3.em.dingtalk.com pop.em.dingtalk.com pre-mail.dingtalk.com pre-mailbee.dingtalk.com smtp.em.dingtalk.com

groupmail.hichina.com mail.hichina.com

mx1.lazada.sg mx2.lazada.sg

alimei-auth.mxhichina.com autodiscover.mxhichina.com caldav.mxhichina.com email.mxhichina.com ex.mxhichina.com imap.mxhichina.com ldap.mxhichina.com mail.mxhichina.com mailhelp.mxhichina.com mailhw.mxhichina.com mailsso.mxhichina.com mxn.mxhichina.com mxus.mxhichina.com mxw.mxhichina.com pop3.mxhichina.com smtp.mxhichina.com static.mxhichina.com usimap.mxhichina.com usmail.mxhichina.com usmailsso.mxhichina.com uspop3.mxhichina.com ussmtp.mxhichina.com