DNS Gurus
Open Cached · just now
87/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=California, L=Santa Ana, O=FATCO Holdings, LLC, CN=www.firstam.com
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid From
March 03, 2025
Valid Until
March 02, 2026 91 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C3:B0:E7:D5:8B:49:88:DD:55:D8:3A:0D:0B:3E:56:71:DF:58:1B:F3:67:11:0E:A0:B0:9F:20:3E:B0:2C:BF:27
Alternative Names
75 domains

Security Configuration

TLS Protocols
TLS 1.2
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Strong
default-src; font-src; img-src; +6 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

75 domains
nhdacademy.com www.nhdacademy.com

Other domains in certificate

americandigitaltitle.com www.americandigitaltitle.com
beutlerexchangegroup.com www.beutlerexchangegroup.com
firstam.co.in www.firstam.co.in
docutech.com www.docutech.com
ext.falive.net falive.net www.falive.net
fanhd.com www.fanhd.com
fatrustee.com www.fatrustee.com
feedback.firstam.com firstam.com www.firstam.com
firstam.insurance www.firstam.insurance
benefits.firstam.net firstam.net iss.firstam.net office-photos.firstam.net teachme-admin-iss.firstam.net veracode.firstam.net www.firstam.net
firstamerican.insurance www.firstamerican.insurance
firstamericantitle.insurance www.firstamericantitle.insurance
firstamericantrust.bank www.firstamericantrust.bank
firstamrates.com www.firstamrates.com
firstamtrust.bank www.firstamtrust.bank
firstamtrust.com www.firstamtrust.com
firstfundingusa.com www.firstfundingusa.com
gofirstam.com www.gofirstam.com
myfirstam.com www.myfirstam.com
nhdacademy.net www.nhdacademy.net
nhdacademy.org www.nhdacademy.org
pclawassociates.com www.pclawassociates.com
pcnsafeescrow.com www.pcnsafeescrow.com
pennattorneys.com www.pennattorneys.com
safeescrow.com www.safeescrow.com
safevalidation.com www.safevalidation.com
smscorp.com www.smscorp.com
theheritageescrow.com www.theheritageescrow.com
transactionalrisksolutions.com www.transactionalrisksolutions.com
tribaltitle.com www.tribaltitle.com
tribaltitleservices.com www.tribaltitleservices.com
trustlinkservices.com www.trustlinkservices.com
vestify.net www.vestify.net