75/100 SECURITY SCORE

Certificate Information

Subject
CN=canvasart.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026 53 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
27:36:2D:96:38:2B:DF:93:71:DB:45:F4:9D:0F:70:71:CB:23:5B:7A:1C:59:90:32:7E:B1:A6:5D:42:EF:AF:40
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
chicagoerotic.com *.chicagoerotic.com *.api.chicagoerotic.com *.crm.chicagoerotic.com *.dev.chicagoerotic.com *.forum.chicagoerotic.com *.new.chicagoerotic.com *.ww.chicagoerotic.com

Other domains in certificate

432h.cc *.432h.cc *.api.432h.cc
*.bi.canvasart.com.au canvasart.com.au *.canvasart.com.au *.salt.canvasart.com.au
*.cp.deer-creek-lodge.com deer-creek-lodge.com *.deer-creek-lodge.com *.nehap.deer-creek-lodge.com *.opsware.deer-creek-lodge.com *.pda.deer-creek-lodge.com *.pl.deer-creek-lodge.com *.themes.deer-creek-lodge.com *.vega.deer-creek-lodge.com *.xxljob.deer-creek-lodge.com
demaque.com *.demaque.com *.img.demaque.com
df6666633.vip *.df6666633.vip *.www.df6666633.vip
*.cpcalendars.dinso.net dinso.net *.dinso.net *.lowprice.dinso.net
*.app.erektionsstoerung.info *.development-flow.erektionsstoerung.info erektionsstoerung.info *.erektionsstoerung.info *.resolver1.erektionsstoerung.info
*.admin.fedbf.com *.comune.fedbf.com *.dev.fedbf.com fedbf.com *.fedbf.com *.mx.fedbf.com *.video.fedbf.com *.videos3.fedbf.com
*.admin.jailbaitgalleries.com *.api.jailbaitgalleries.com *.app.jailbaitgalleries.com *.backend.jailbaitgalleries.com *.demo.jailbaitgalleries.com *.dev.jailbaitgalleries.com *.hostmaster.jailbaitgalleries.com jailbaitgalleries.com *.jailbaitgalleries.com *.m.jailbaitgalleries.com *.rd.jailbaitgalleries.com *.sitemap.jailbaitgalleries.com *.sitemaps.jailbaitgalleries.com *.staging.jailbaitgalleries.com *.ww1.jailbaitgalleries.com *.ww12.jailbaitgalleries.com *.ww99.jailbaitgalleries.com *.www.jailbaitgalleries.com
*.9j.liars.com.au *.development.liars.com.au liars.com.au *.liars.com.au *.mail.liars.com.au *.nsd.liars.com.au *.sh.liars.com.au *.v.liars.com.au *.www.liars.com.au *.zsj.liars.com.au
*.kglwea.llovecrush.com llovecrush.com *.llovecrush.com *.ww38.llovecrush.com
*.api.memeslmp.com memeslmp.com *.memeslmp.com *.staging.memeslmp.com
*.m.practicalbags.com practicalbags.com *.practicalbags.com
seorank.au *.seorank.au *.wildcard.seorank.au