81/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=Arkansas, L=Bentonville, O=Walmart Inc., CN=cf-prod2.walmart.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign RSA OV SSL CA 2018
Valid From
October 07, 2025
Valid Until
November 08, 2026 347 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
90:32:C7:C1:89:E6:14:BB:1D:93:5D:16:40:24:25:2C:17:FB:EA:0C:20:39:31:14:80:05:20:A0:46:24:B5:A4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

82 domains
acnt.walmart.com aroptical-wasm-storage.walmart.com beaverlakeaviation.walmart.com campus.walmart.com ce.walmart.com cf-prod2.walmart.com clicks.walmart.com communityacademy.walmart.com comunidadspark.walmart.com creator.walmart.com crystal.walmart.com cyborg-voice-glass.walmart.com digitaltoolboxwidget.walmart.com drive4spark.walmart.com dx.walmart.com eclosing-api.walmart.com eclosing.walmart.com edu.walmart.com eduacademy.walmart.com ewmms.walmart.com fm-tracker.walmart.com glm.walmart.com golocal.walmart.com i2s-stg.walmart.com i2s.walmart.com joyrun.walmart.com marketplacelearn.walmart.com merlin-marketplace.walmart.com payroll.walmart.com phronesis.walmart.com reach.walmart.com seller.walmart.com sparkgoodgrants.walmart.com stride.walmart.com supportchat.walmart.com tasks.walmart.com waiting-room.walmart.com wls.walmart.com wmsalud.walmart.com wmsclogistics.walmart.com www-cf.walmart.com zeekit.walmart.com a.polymorph.walmart.com api.waiting-room.walmart.com ava-webchat-ui.prod.walmart.com blob.sparknotifications.walmart.com clicks.bwtest.walmart.com clicks.customerengagement.walmart.com clicks.dailyeats.walmart.com clicks.whri.walmart.com collab.sourcing.walmart.com corporate.newhomeofficemap.walmart.com developer.us.walmart.com egiftcards.centroamerica.walmart.com et.prod.walmart.com liderai.prod.walmart.com link.support.walmart.com link.updates.walmart.com lmd.prod.walmart.com login.gs.walmart.com moodle-azure.prod.walmart.com orders.seller.walmart.com q-api.www.walmart.com redd.wireless.walmart.com rover.wireless.walmart.com s.polymorph.walmart.com sfo-redd.wireless.walmart.com sharepointwebhook.dpa.walmart.com sourcing-workbench.gs.walmart.com supplierhub.sourcing.walmart.com sustainability.platform.walmart.com t.polymorph.walmart.com ums.sourcing.walmart.com walmartsustainabilityhub.chat.walmart.com work-manager.prod.walmart.com www.adlink.walmart.com zeekit.www.walmart.com api.control.waiting-room.walmart.com consulta.giftcard.centroamerica.walmart.com customers.egiftcards.centroamerica.walmart.com developer.api.us2.walmart.com storage.productanalytics.prod.walmart.com