Open
Cached
·
just now
85/100
SECURITY SCORE
Certificate Information
Subject
C=CH, ST=Zürich, L=Zürich, O=ABB Asea Brown Boveri Ltd, CN=waf-abb-cert12.abb.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Valid From
September 12, 2025
Valid Until
June 30, 2026
166 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C7:B4:FD:26:EA:71:E5:1E:52:AB:21:19:4B:B7:2B:79:24:A7:16:A7:B4:3C:E8:DB:72:B7:AD:3D:6C:3A:0E:25
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
99 domains
imageservice.abb.com
jets.abb.com
leveragecards.abb.com
ruca.abb.com
sp-api.abb.com
usermanagement.abb.com
waf-abb-cert12.abb.com
abbtv.inside.abb.com
api.leveragecards.abb.com
api.ruca.abb.com
apim.motion.abb.com
auth.library.abb.com
buzz.inside.abb.com
c4e.e-invoicing-ascc.abb.com
chaman.drives.abb.com
customizing.mybuildings.abb.com
developers.connect.abb.com
devicemanagement.motion.abb.com
discoveryapi.library.abb.com
eleai.cloudintegration.abb.com
em.drives.abb.com
equipmentmanagement.drives.abb.com
genie.el-data-science.abb.com
notificationapi.library.abb.com
nps.cloudintegration.abb.com
partnerhub.connect.abb.com
ra-workitem.cloudintegration.abb.com
salesinfo.drives.abb.com
share.library.abb.com
stage.ruca.abb.com
supportlineandwarranty.drives.abb.com
test.apc.abb.com
test.smarttracker.abb.com
voices.inside.abb.com
wiki.inside.abb.com
www.usermanagement.abb.com
abbtv.inside.stage.abb.com
admin.customizing.mybuildings.abb.com
api.customizing.mybuildings.abb.com
api.equipmentmanagement.drives.abb.com
api.genie.el-data-science.abb.com
api.library.stage.abb.com
api.smart-home-configurator.mybuildings.abb.com
auth.library.stage.abb.com
auth.library.test.abb.com
demo2.smartmaster.measurementservice.abb.com
dev.apim.motion.abb.com
dev.apimanagement.motion.abb.com
dev.chaman.drives.abb.com
dev.developers.connect.abb.com
dev.em.drives.abb.com
dev.equipmentmanagement.drives.abb.com
dev.salesinfo.drives.abb.com
dev.supportlineandwarranty.drives.abb.com
discoveryapi.library.stage.abb.com
discoveryapi.library.test.abb.com
ds.library.stage.abb.com
ds.library.test.abb.com
hafonorm.configurator.nl.abb.com
library.stage.e.abb.com
library.test.e.abb.com
niessen.customizing.mybuildings.abb.com
notificationapi.library.stage.abb.com
notificationapi.library.test.abb.com
products.mo.cloudintegration.abb.com
sandbox.accessmanagement.motion.abb.com
share.library.stage.abb.com
share.library.test.abb.com
stage.api.ruca.abb.com
stage.apim.motion.abb.com
stage.apimanagement.motion.abb.com
stage.buzz.inside.abb.com
stage.developers.connect.abb.com
stage.devicemanagement.motion.abb.com
stage.ecodesign.drivesmotors.abb.com
stage.voices.inside.abb.com
studio.sales-portal.drives.abb.com
test.developers.connect.abb.com
web.mfiletransfer.stage.abb.com
wiki.inside.stage.abb.com
api.admin.customizing.mybuildings.abb.com
api.demo2.smartmaster.measurementservice.abb.com
api.dev.conditionmonitoring.traction.abb.com
api.dev.equipmentmanagement.drives.abb.com
api.prod.conditionmonitoring.traction.abb.com
api.qa.conditionmonitoring.traction.abb.com
api.stage.conditionmonitoring.traction.abb.com
dev.developer.apimanagement.motion.abb.com
sandbox.api.accessmanagement.motion.abb.com
stage.api.uam.library.abb.com
stage.developer.apimanagement.motion.abb.com
test.api.uam.library.abb.com
uam.demo2.smartmaster.measurementservice.abb.com
ws.library.stage.e.abb.com
ws.library.test.e.abb.com
elb.ws.library.stage.e.abb.com
elb.ws.library.test.e.abb.com
int.ws.library.stage.e.abb.com
int.ws.library.test.e.abb.com