DNS Gurus
Cached · just now
96/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 54
Adobe Target logo Adobe Target AWS CloudFront logo AWS CloudFront Let's Encrypt logo Let's Encrypt Active incidents Google Tag Manager logo Google Tag Manager WP Engine logo WP Engine AppNexus (Xandr) logo AppNexus (Xandr) Heroku logo Heroku Reddit logo Reddit Active incidents OpenX logo OpenX Yahoo logo Yahoo Microsoft Translator logo Microsoft Translator Liveramp logo Liveramp Google DoubleClick logo Google DoubleClick Google Analytics logo Google Analytics Google Conversion Tracking logo Google Conversion Tracking Yoast logo Yoast 6sense logo 6sense New Relic logo New Relic Cloudflare CDN logo Cloudflare CDN Active incidents Google Static File Front End logo Google Static File Front End Google API JS Client logo Google API JS Client Wistia logo Wistia Twitter logo Twitter Cloudflare Web Analytics logo Cloudflare Web Analytics Active incidents Hotjar logo Hotjar LinkedIn logo LinkedIn Drift logo Drift unpkg logo unpkg Google Search logo Google Search BootstrapCDN logo BootstrapCDN Cloudflare logo Cloudflare Active incidents Adobe Marketo logo Adobe Marketo Adobe Dynamic Tag Management logo Adobe Dynamic Tag Management Google Cloud Functions logo Google Cloud Functions Demandbase logo Demandbase Storylane logo Storylane Facebook logo Facebook Amazon S3 logo Amazon S3 StackAdapt logo StackAdapt Adobe Fonts (Typekit) logo Adobe Fonts (Typekit) Moz logo Moz AWS logo AWS Active incidents Ceros logo Ceros jQuery logo jQuery Rubicon Project logo Rubicon Project Vimeo logo Vimeo TrustArc logo TrustArc Akamai logo Akamai The Trade Desk logo The Trade Desk SmartRecruiters logo SmartRecruiters Font Awesome logo Font Awesome MyFonts logo MyFonts jsDelivr logo jsDelivr Google Cloud logo Google Cloud

Certificate Information

Subject
CN=venafi.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 27, 2026
Valid Until
July 26, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A5:41:17:CE:E5:50:0A:94:0B:77:79:E3:A3:08:31:A9:27:73:4A:A6:77:4A:BF:DF:6F:F5:62:0E:87:CA:36:C2
Alternative Names
2 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
AWS CloudFront logo
Basic
default-src; upgrade-insecure-requests Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
midi=(), microphone=(), camera=(); +3 more
Recommendations
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'

CAA Records (Certificate Authority Authorization)

CAA Records
Configured (Restricts certificate issuance)
Current Issuer
Authorized (Matches CAA policy)
Authorized CAs
comodoca.com digicert.com ; cansignhttpexchanges=yes globalsign.com identrust.com letsencrypt.org pki.goog ; cansignhttpexchanges=yes quovadisglobal.com ssl.com
Wildcard CAs
quovadisglobal.com ssl.com comodoca.com digicert.com ; cansignhttpexchanges=yes identrust.com letsencrypt.org pki.goog ; cansignhttpexchanges=yes
Incident Reporting
Recommendations
  • • Consider using critical flag (flags=128) for stricter CAA enforcement
  • • You have authorized 8 CAs - consider limiting to only the CAs you actively use

Subject Alternative Names

2 domains
venafi.com www.venafi.com