Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=canvasart.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026
53 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
27:36:2D:96:38:2B:DF:93:71:DB:45:F4:9D:0F:70:71:CB:23:5B:7A:1C:59:90:32:7E:B1:A6:5D:42:EF:AF:40
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
chicagoerotic.com
*.chicagoerotic.com
*.api.chicagoerotic.com
*.crm.chicagoerotic.com
*.dev.chicagoerotic.com
*.forum.chicagoerotic.com
*.new.chicagoerotic.com
*.ww.chicagoerotic.com
432h.cc
*.432h.cc
*.api.432h.cc
*.bi.canvasart.com.au
canvasart.com.au
*.canvasart.com.au
*.salt.canvasart.com.au
*.cp.deer-creek-lodge.com
deer-creek-lodge.com
*.deer-creek-lodge.com
*.nehap.deer-creek-lodge.com
*.opsware.deer-creek-lodge.com
*.pda.deer-creek-lodge.com
*.pl.deer-creek-lodge.com
*.themes.deer-creek-lodge.com
*.vega.deer-creek-lodge.com
*.xxljob.deer-creek-lodge.com
demaque.com
*.demaque.com
*.img.demaque.com
df6666633.vip
*.df6666633.vip
*.www.df6666633.vip
*.cpcalendars.dinso.net
dinso.net
*.dinso.net
*.lowprice.dinso.net
*.app.erektionsstoerung.info
*.development-flow.erektionsstoerung.info
erektionsstoerung.info
*.erektionsstoerung.info
*.resolver1.erektionsstoerung.info
*.admin.fedbf.com
*.comune.fedbf.com
*.dev.fedbf.com
fedbf.com
*.fedbf.com
*.mx.fedbf.com
*.video.fedbf.com
*.videos3.fedbf.com
*.admin.jailbaitgalleries.com
*.api.jailbaitgalleries.com
*.app.jailbaitgalleries.com
*.backend.jailbaitgalleries.com
*.demo.jailbaitgalleries.com
*.dev.jailbaitgalleries.com
*.hostmaster.jailbaitgalleries.com
jailbaitgalleries.com
*.jailbaitgalleries.com
*.m.jailbaitgalleries.com
*.rd.jailbaitgalleries.com
*.sitemap.jailbaitgalleries.com
*.sitemaps.jailbaitgalleries.com
*.staging.jailbaitgalleries.com
*.ww1.jailbaitgalleries.com
*.ww12.jailbaitgalleries.com
*.ww99.jailbaitgalleries.com
*.www.jailbaitgalleries.com
*.9j.liars.com.au
*.development.liars.com.au
liars.com.au
*.liars.com.au
*.mail.liars.com.au
*.nsd.liars.com.au
*.sh.liars.com.au
*.v.liars.com.au
*.www.liars.com.au
*.zsj.liars.com.au
*.kglwea.llovecrush.com
llovecrush.com
*.llovecrush.com
*.ww38.llovecrush.com
*.api.memeslmp.com
memeslmp.com
*.memeslmp.com
*.staging.memeslmp.com
*.m.practicalbags.com
practicalbags.com
*.practicalbags.com
seorank.au
*.seorank.au
*.wildcard.seorank.au
Other domains in certificate