SSL Certificate Analysis for 3amb.art - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=3amb.art

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

April 28, 2026

Valid Until

July 27, 2026 68 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

5D:11:51:18:33:BD:89:23:1B:2F:A5:4D:49:FA:5B:20:6B:C3:64:8B:E9:39:89:E1:6F:66:4F:3A:D4:BF:24:7F

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

3amb.art *.3amb.art *.2d5f1e9d-5df0-47bc-8e7f-7dec1067746e.3amb.art *.akruolxs.3amb.art *.api.3amb.art *.app.3amb.art *.backend.3amb.art *.bxzkjgph.3amb.art *.chat.3amb.art *.dev.3amb.art *.docs.3amb.art *.external.3amb.art *.hr.3amb.art *.intranet.3amb.art *.m.3amb.art *.my.3amb.art *.portal.3amb.art *.public.3amb.art *.share.3amb.art *.sharepoint.3amb.art *.tlwzdixr.3amb.art *.www.3amb.art

Other domains in certificate

bt521.xyz *.bt521.xyz *.ww25.bt521.xyz

droppify.eu *.droppify.eu *.partner.droppify.eu

majekovachata.eu *.majekovachata.eu *.sniper.majekovachata.eu *.ww84.majekovachata.eu

*.insights-dev.ourheat.co.uk ourheat.co.uk *.ourheat.co.uk

*.comune.successminers.com successminers.com *.successminers.com

*.backend.thenewpresident.it *.dev.thenewpresident.it thenewpresident.it *.thenewpresident.it

*.hostmaster.token.tips token.tips *.token.tips

veronline.biz *.veronline.biz *.webmail.veronline.biz *.ww38.veronline.biz

wood-veneer.co.uk *.wood-veneer.co.uk

*.backup.workingout.co *.blog.workingout.co *.store.workingout.co *.temp.workingout.co *.wiki.workingout.co workingout.co *.workingout.co

*.app.xcmz.com *.forum.xcmz.com *.hostmaster.xcmz.com *.owa.xcmz.com *.probiller.xcmz.com *.remote.xcmz.com *.ww25.xcmz.com *.ww38.xcmz.com *.www.xcmz.com xcmz.com *.xcmz.com *.xgss.xcmz.com