In headers / Padlocks / Certificate authorities / site seals we trust

In Headers/ Padlocks / site Seals / CA’s we trust !

Test my SSL site…

Certificate authorities…

Available online testing services

checking: - server headers - https cert instalations


checking: - server headers - https cert instalations

Test my server please


Test my server please

Certificate authorities… checking https / cert instalations

GeoTrust

GeoTrust, a leading certificate authority,

provides retail and reseller services for SSL encryption, and website authentication, digital

signatures, code signing, secure email, and enterprise SSL products


GeoTrust


GeoTrust


Server: header field :)


HSTS header field :)




RapidSSL

RapidSSL is on a mission to help you secure your domain with SSL as fast as possible. We’ve

streamlined and automated every part of the enrollment and authentication processes


RapidSSL








Symantec

Cyber Security Services

Strengthen your security with our experts,

global threat intelligence, advanced monitoring, incident response, and cyber readiness services.


Symantec






HSTS field :)


wait there must be something better…


Thawte

As a leading global certificate authority,

Thawte provides online security trusted by millions

around the world. Expert support, robust

authentication practices, and easy online management make Thawte the best value for SSL

certificates and code signing certificates.


Thawte








See a pattern here?


Security headers in apache2.conf


My Server Signature =)

It runs on ZxSpectrum !!


should i report this?…i’ve tried…


should i report this?…i’ve tried


should i report this?…i’ve tried


and…got a hit


and…got a hit


OK, now someone who really knows security…









Certificate fields: OU, CN, blah












OK, now RapidSSLonline.com

Now, let’s check the CSR checking service




CSR email field

OK, back to RapidSSLonline.com

OK, i’ve tried to report… and got this mail…

OK, back to RapidSSLonline.com

OK, i’ve tried to report… and got this mail…

https://sslshopper.com Both tests:

SSL checker / server header CSR decoder

https://sslshopper.com Both tests:

SSL checker / server header CSR decoder

https://sslshopper.com





https://sslshopper.com -> private key?? what ??

Let’s try “European leader in website security…”












OK, now some other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites:

OK, other sites: private key??

OK, other sites: CDN

KEYCDN also offers a great test




The End

In headers / Padlocks / Certificate authorities / site seals we trust

Internet