Open
Cached
·
just now
92/100
SECURITY SCORE
Certificate Information
Subject
CN=staging.fullcontact.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 25, 2025
Valid Until
March 25, 2026
57 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
77:73:40:FC:B7:3F:1E:44:FA:AA:24:A3:94:1C:6C:98:4D:FC:0E:17:28:A6:FF:C4:03:B6:01:32:A8:74:C2:91
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
default-src; base-uri; media-src; +6 more
default-src 'none'; base-uri 'none'; media-src 'self' *.fullcontact.com 1a3asl4eps7u26kl661u3bi9-wpengine.netdna-ssl.com *.vimeo.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.fullcontact.com 1a3asl4eps7u26kl661u3bi9-wpengine.netdna-ssl.com code.jquery.com tagmanager.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.google.com *.bizographics.com *.hotjar.com *.bing.com *.adroll.com *.convertexperiments.com *.doubleclick.net *.facebook.net *.vimeo.com *.wistia.net *.vimeocdn.com *.newrelic.com *.nr-data.net rapidzebra.io *.autopilothq.com *.consensu.org assets.calendly.com builder-assets.unbounce.com *.licdn.com *.twitter.com *.ads-twitter.com *.pardot.com *.github.com *.chilipiper.com *.rollout.io *.lr-ingest.io *.bugsnag.com *.crwdcntrl.net *.zoominfo.com www.youtube.com *.zapier.com zapier.com *.zi-scripts.com cdn.linkedin.oribi.io *.liadm.com https://cdn.ketchjs.com/ketchtag/stable/v2.12/ketch.js https://cdn.ketchjs.com/lanyard/v2/lanyard.js https://cdn.ketchjs.com/plugins/v1/plugins.js https://global.ketchcdn.com/web/v1/config/full_contact/ https://cdn.ziffstatic.com/jst/ https://cdn.cookielaw.org/scripttemplates/; style-src 'self' blob: 'unsafe-inline' tagmanager.google.com fonts.googleapis.com 1a3asl4eps7u26kl661u3bi9-wpengine.netdna-ssl.com *.vimeocdn.com assets.calendly.com builder-assets.unbounce.com *.githubassets.com *.chilipiper.com *.zapier.com *.googletagmanager.com; img-src * self data: https:; font-src 'self' 1a3asl4eps7u26kl661u3bi9-wpengine.netdna-ssl.com fonts.gstatic.com data: https:; child-src 'self' *.fullcontact.com www.youtube.com *.vimeo.com *.vimeocdn.com *.wistia.net *.hotjar.com *.doubleclick.net calendly.com www.googletagmanager.com *.chilipiper.com; connect-src 'self' *.hotjar.com wss://*.hotjar.com *.hotjar.io *.vimeo.com *.convertexperiments.com rapidzebra.io calendly.com *.chilipiper.com *.rollout.io *.lr-ingest.io *.bugsnag.com *.google-analytics.com stats.g.doubleclick.net idx.liadm.com *.fullcontact.com *.crwdcntrl.net *.zoominfo.com *.zapier.com zapier.com *.zi-scripts.com cdn.linkedin.oribi.io *.googlesyndication.com *.adservice.google.com *.google.com google.com px.ads.linkedin.com googleads.g.doubleclick.net *.liadm.com https://global.ketchcdn.com/web/v3/config/full_contact/ https://global.ketchcdn.com/web/v3/ip https://global.ketchcdn.com/web/v2/log https://global.ketchcdn.com/web/v3/consent/full_contact/ https://cdn.cookielaw.org/consent/ https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://cdn.cookielaw.org/scripttemplates/ https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg https://privacyportal.onetrust.com/request/v1/consentreceipts https://cdn.cookielaw.org/vendorlist/;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=(self "https://fullcontact.com"), microphone=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports