SSL Certificate Analysis for staging.firstalert.com - Security Grade & TLS Configuration

Open Cached · just now

75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

DigiCert

Certificate Information

Subject

C=US, ST=Arizona, L=Scottsdale, O=Resideo Technologies, Inc, CN=www.resideo.com

Issuer

C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid From

January 16, 2026

Valid Until

January 15, 2027 253 days

Public Key

RSA 2048 bit Adequate

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

13:12:7B:46:0E:C4:CD:9F:78:12:E3:5A:DC:43:78:7C:88:11:8F:9E:BA:34:08:BF:3D:6F:7A:5A:86:34:05:AB

Alternative Names

105 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

105 domains

firstalert.com authoring.firstalert.com preview.firstalert.com qa.firstalert.com staging.firstalert.com www.firstalert.com cu.region.firstalert.com eu2.region.firstalert.com cu.region.staging.firstalert.com eu2.region.staging.firstalert.com

Other domains in certificate

adiglobal.com authoring.adiglobal.com cu.region.adiglobal.com cu.region.staging.adiglobal.com eu2.region.rde.adiglobal.com eu2.region.staging.adiglobal.com preview.adiglobal.com staging.adiglobal.com www.adiglobal.com

authoring.brkelectronics.com brkelectronics.com cu.region.brkelectronics.com cu.region.staging.brkelectronics.com eu2.region.brkelectronics.com eu2.region.staging.brkelectronics.com preview.brkelectronics.com staging.brkelectronics.com www.brkelectronics.com

authoring.connectedsavings.com connectedsavings.com cu.region.connectedsavings.com cu.region.staging.connectedsavings.com eu2.region.connectedsavings.com eu2.region.staging.connectedsavings.com preview.connectedsavings.com staging.connectedsavings.com www.connectedsavings.com

authoring.honeywellhome.com cdn.honeywellhome.com cu.region.honeywellhome.com cu.region.staging.honeywellhome.com eu2.region.honeywellhome.com eu2.region.staging.honeywellhome.com honeywellhome.com preview.honeywellhome.com staging.honeywellhome.com www.honeywellhome.com