76/100 SECURITY SCORE

Certificate Information

Subject
CN=agileanalysis.site
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 13, 2026
Valid Until
September 11, 2026 78 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:01:8D:7F:1A:A9:71:8C:76:12:85:B2:A9:2E:C9:64:23:C4:E8:0E:27:D0:5A:02:A3:F6:50:89:F8:42:C5:F8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
awfullybad.com *.awfullybad.com *.aaa.awfullybad.com

Other domains in certificate

11178.xyz *.11178.xyz
24951.vip *.24951.vip
251476.pro *.251476.pro
55ib.com *.55ib.com
632959.com *.632959.com
74884.blog *.74884.blog
77990.one *.77990.one
96971.buzz *.96971.buzz
abalomendez.com *.abalomendez.com
ad24.in *.ad24.in
agileanalysis.site *.agileanalysis.site
aifoerderung.com *.aifoerderung.com
aioneclick.com *.aioneclick.com
akaneyakobe.com *.akaneyakobe.com
asiai.app *.asiai.app
aube-saveurs.com *.aube-saveurs.com
bankmarkt.com *.bankmarkt.com
beginpress.com *.beginpress.com
billboardcasablanca.org *.billboardcasablanca.org
birol.biz *.birol.biz
bleedle.net *.bleedle.net
blessingmillers.com *.blessingmillers.com
brokersphotos.com *.brokersphotos.com
brunswickbeachesblog.com *.brunswickbeachesblog.com
budaya777.top *.budaya777.top
careyelectrical.com *.careyelectrical.com
clothingindia.com *.clothingindia.com
copal-usa.com *.copal-usa.com
extralettucecreationcreations.com *.extralettucecreationcreations.com
familyfinancialplanningandconsulting.com *.familyfinancialplanningandconsulting.com
feecu.com *.feecu.com
feehy.com *.feehy.com
foreverbase.com *.foreverbase.com
kristymacdonald.com *.kristymacdonald.com
labarradelport.com *.labarradelport.com
marais-breton-baie-bourgneuf.com *.marais-breton-baie-bourgneuf.com
martha240.cyou *.martha240.cyou
michaelnortoncpa.com *.michaelnortoncpa.com
mingyiol.com *.mingyiol.com
rmvp-rugby.com *.rmvp-rugby.com
spinecenternewjersey.com *.spinecenternewjersey.com
tkyqe.app *.tkyqe.app
uyhpw.qpon *.uyhpw.qpon