DNS Gurus
Open Cached · just now
71/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=storage.live.com
Issuer
C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07
Valid From
October 25, 2025
Valid Until
April 23, 2026 160 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA384-RSA
SHA-256 Fingerprint
92:62:B6:AB:1E:BA:21:6D:27:A8:45:E7:1E:80:22:41:2A:BE:C6:F0:FF:D0:1B:77:7B:FB:75:AE:6D:5A:FA:AB
Alternative Names
137 domains

Security Configuration

TLS Protocols
TLS 1.0 TLS 1.1 TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • • TLS 1.3 is not supported (recommended)
  • • TLS 1.1 is deprecated and should be disabled
  • • TLS 1.0 is deprecated and should be disabled

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

137 domains
api-df.live.net api.live.net apis.live.net config.live.net df-config.live.net docs-df.live.net docs.live.net l-df.live.net l.live.net policies.live.net s2s-policies.live.net s2s-settings.live.net s2s-skyapi-df.live.net s2s-skyapi.live.net settings.live.net skyapi-df.live.net skyapi.live.net *.apis.live.net *.config.live.net *.df-config.live.net *.docs-df.live.net *.docs.live.net *.policies.live.net *.s2s-policies.live.net *.s2s-settings.live.net *.settings.live.net *.slps.live.net df.policies.live.net df.s2s-policies.live.net df.s2s-settings.live.net df.settings.live.net *.df.policies.live.net *.df.s2s-policies.live.net *.df.s2s-settings.live.net *.df.settings.live.net d.bl3301.docs.live.net d.bl3302.docs.live.net

Other domains in certificate

*.1drv.com *.adminsvc.i001.1drv.com *.adminsvc.p001.1drv.com *.am.files.1drv.com *.api.p001.1drv.com *.bl.files.1drv.com *.bn.files.1drv.com *.by.files.1drv.com *.camp.i001.1drv.com *.ch.files.1drv.com *.config.i001.1drv.com *.cy.files.1drv.com *.db.files.1drv.com *.deploymgr.p001.1drv.com *.dm.files.1drv.com *.files-df.1drv.com *.files.1drv.com *.gls.i001.1drv.com *.job.p001.1drv.com *.keymaster.i001.1drv.com *.keymaster.p001.1drv.com *.lps.i001.1drv.com *.ph.files.1drv.com *.s2s-files-df.1drv.com *.s2s-files.1drv.com *.sn.files.1drv.com *.wstcrs.i001.1drv.com *.wstlm.1drv.com
1drv.ms
ssw.live-int.com
api-df.live.com api.live.com *.cobalt.df.storage.live.com *.cobalt.storage.live.com dev.live.com device.ra.live.com df.s2s-storage.live.com *.df.s2s-storage.live.com df.storage.live.com *.df.storage.live.com oauth.live.com *.ra.live.com s2s-storage.live.com *.s2s-storage.live.com skyapi.newdrive.live.com skyapi.onedrive.live.com skyapi.skydrive.live.com ssw.live.com storage.live.com *.storage.live.com *.users.df.storage.live.com *.users.storage.live.com
*.bay.livefilestore.com *.bl3301.livefilestore.com *.bl3302.livefilestore.com *.blu.livefilestore.com *.bn1.livefilestore.com *.bn1301.livefilestore.com *.bn1302.livefilestore.com *.bn1303.df.livefilestore.com *.bn1303.livefilestore.com *.bn1304.livefilestore.com *.bn1391soak2.livefilestore.com *.bn1391soak3.livefilestore.com *.by3301.livefilestore.com *.by3302.livefilestore.com *.df.livefilestore.com *.dm1.livefilestore.com *.dm2301.livefilestore.com *.dm2302.livefilestore.com *.dm2303.df.livefilestore.com *.dm2303.livefilestore.com *.dm2304.livefilestore.com *.dm2391soak2.livefilestore.com *.dm2391soak3.livefilestore.com *.livefilestore.com *.s2s.df.livefilestore.com *.s2s.livefilestore.com *.sn2.df.livefilestore.com *.sn2.livefilestore.com *.snt002.df.livefilestore.com *.tuk.livefilestore.com
register.mesh.com
*.cobalt.df.storage.msn.com *.cobalt.storage.msn.com *.df.storage.msn.com storage.msn.com *.storage.msn.com *.users.df.storage.msn.com *.users.storage.msn.com
*.api.onedrive.com df.api.onedrive.com *.df.api.onedrive.com df.people.onedrive.com df.s2s-api.onedrive.com *.df.s2s-api.onedrive.com *.onedrive.com s2s-api.onedrive.com *.s2s-api.onedrive.com
sdrv.ms