Cached · just now
91/100 SECURITY SCORE

Certificate Information

Subject
CN=bashton.fr
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
March 29, 2026
Valid Until
June 27, 2026 59 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E9:99:4F:13:4E:54:51:85:92:56:1B:4D:4C:4C:2C:6C:61:C9:F3:C1:B5:D1:88:E1:95:F8:6E:C1:51:9D:07:15
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
geolocation=(), midi=(), sync-xhr=(); +6 more
Recommendations
  • Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
6888.pw *.6888.pw *.gef.6888.pw *.sh.6888.pw

Other domains in certificate

*.app.babiestoddler.it babiestoddler.it *.babiestoddler.it
bashton.fr *.bashton.fr
*.arkadas.begen.us begen.us *.begen.us *.bot.begen.us *.ci.begen.us *.comune.begen.us *.fly.begen.us *.ildcard.begen.us *.instagram.begen.us *.instakipci.begen.us *.mail.begen.us *.sayfa.begen.us *.takipci.begen.us *.ww1.begen.us
cambodiajob.org *.cambodiajob.org
carnivores.co.uk *.carnivores.co.uk
dentrolanotizia.it *.dentrolanotizia.it *.hostmaster.dentrolanotizia.it
*.api.evone.io evone.io *.evone.io
*.6a8ddd20-b98d-4770-90bf-cabe7e3e3a7f.hktramstation.singles *.admin.hktramstation.singles *.api.hktramstation.singles *.app.hktramstation.singles *.assets.hktramstation.singles *.autodiscover.hktramstation.singles *.blog.hktramstation.singles *.demo.hktramstation.singles *.dev.hktramstation.singles *.exchange.hktramstation.singles hktramstation.singles *.hktramstation.singles *.hostmaster.hktramstation.singles *.m.hktramstation.singles *.shop.hktramstation.singles *.staging.hktramstation.singles *.test.hktramstation.singles
jzy16.cfd *.jzy16.cfd
*.5fgs.l43hlbk.com *.f5hd.l43hlbk.com *.fgd4.l43hlbk.com *.ftg5.l43hlbk.com *.gh78.l43hlbk.com *.ghfg.l43hlbk.com *.hbf8.l43hlbk.com *.hfrt.l43hlbk.com *.hl1a.l43hlbk.com *.jf16.l43hlbk.com *.jgtt.l43hlbk.com *.jjhs.l43hlbk.com *.jyfru.l43hlbk.com l43hlbk.com *.l43hlbk.com
*.1.omgbets10.cc omgbets10.cc *.omgbets10.cc
*.api.perfpormancedroneshow.com *.dev.perfpormancedroneshow.com *.mail.perfpormancedroneshow.com *.new.perfpormancedroneshow.com perfpormancedroneshow.com *.perfpormancedroneshow.com *.rd.perfpormancedroneshow.com *.rdweb.perfpormancedroneshow.com *.test.perfpormancedroneshow.com *.vpn.perfpormancedroneshow.com
*.m.ropo.in ropo.in *.ropo.in
stayathomedads.co.uk *.stayathomedads.co.uk
utext.co.uk *.utext.co.uk
*.ww38.xn--kzlrmakbutikotel-9pcbb.com xn--kzlrmakbutikotel-9pcbb.com *.xn--kzlrmakbutikotel-9pcbb.com