Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=georgeconcurseiro.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 01, 2026
Valid Until
August 30, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:45:97:BD:25:4E:04:F8:77:AD:26:E9:26:4A:C1:DC:26:58:AC:FC:C7:38:2D:99:03:78:1A:E2:F7:F3:C4:A2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
astroweb.co *.astroweb.co *.a.astroweb.co

Other domains in certificate

9drop.live *.9drop.live *.autodiscover.9drop.live *.hostmaster.9drop.live *.webmail.9drop.live *.www.9drop.live
*.asmpx.blocksboom.com *.atl161.blocksboom.com *.atl21.blocksboom.com *.atl31.blocksboom.com blocksboom.com *.blocksboom.com *.cloud.blocksboom.com *.connect.blocksboom.com *.corona.blocksboom.com *.exchange.blocksboom.com *.hostmaster.blocksboom.com *.msgin.blocksboom.com *.optin.blocksboom.com *.pop.blocksboom.com *.rds.blocksboom.com *.rdweb.blocksboom.com *.remote.blocksboom.com *.responder.blocksboom.com *.smab.blocksboom.com *.wwww.blocksboom.com
cyberlight.co *.cyberlight.co
eplane.co *.eplane.co
*.cpanel.foundo.io foundo.io *.foundo.io *.mail.foundo.io *.sitemap.foundo.io
*.cpanel.georgeconcurseiro.com *.cpcalendars.georgeconcurseiro.com *.fe66e5aa3958.georgeconcurseiro.com *.flashmaps.georgeconcurseiro.com *.fve.georgeconcurseiro.com georgeconcurseiro.com *.georgeconcurseiro.com *.mail.georgeconcurseiro.com *.sitemaps.georgeconcurseiro.com *.www.georgeconcurseiro.com
habibas-boutique.com *.habibas-boutique.com
hacehardware.com *.hacehardware.com
hh56232.cc *.hh56232.cc
highproteinchallenge.com *.highproteinchallenge.com
himaniscollection.com *.himaniscollection.com
homeconnection.co *.homeconnection.co
homenaturenews.com *.homenaturenews.com
momentumlayer.co *.momentumlayer.co *.www.momentumlayer.co
*.chatsupport.pyramidhost.com *.create.pyramidhost.com *.networking.pyramidhost.com pyramidhost.com *.pyramidhost.com
s8v0lw.cyou *.s8v0lw.cyou
smutstone.net *.smutstone.net
softlayer-nfr.info *.softlayer-nfr.info
solelyshoes.com *.solelyshoes.com
soulwalk.info *.soulwalk.info
*.c7ehsq.startamplifyybronze.info startamplifyybronze.info *.startamplifyybronze.info
*.api.toegang.help *.m.toegang.help toegang.help *.toegang.help *.www.toegang.help
www55ka.me *.www55ka.me