Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=halfgay.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
August 28, 2026
Valid Until
November 26, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AC:59:E4:95:FB:AE:44:DA:BB:D2:04:23:DE:FD:C9:64:66:2C:8A:50:E1:94:70:15:42:42:98:B6:12:88:D4:03
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
emberd.co *.emberd.co *.admin.emberd.co *.www.emberd.co

Other domains in certificate

*.dev.facultefaco.com facultefaco.com *.facultefaco.com *.home.facultefaco.com *.mobile.facultefaco.com *.w.facultefaco.com *.web.facultefaco.com
g9av45.top *.g9av45.top *.login.g9av45.top
halfgay.com *.halfgay.com
housenet.info *.housenet.info *.remote.housenet.info
*.em2.oraclecluod.com *.em3.oraclecluod.com *.faocs.oraclecluod.com *.identity.oraclecluod.com *.ocecdn.oraclecluod.com *.ocp.oraclecluod.com *.ocs.oraclecluod.com oraclecluod.com *.oraclecluod.com *.us2.oraclecluod.com
emv1.paediatricservices.com.au mta-sts.paediatricservices.com.au paediatricservices.com.au www.paediatricservices.com.au
*.bcc.palych.io *.blog.palych.io *.embedded.palych.io *.fb-eu1.palych.io *.fresh-kpop.palych.io *.godgeleerdheid.palych.io *.houston.palych.io *.iusyusephukum.palych.io *.lubw.palych.io *.lyc-monnet-montpellier.palych.io *.nceas.palych.io palych.io *.palych.io *.place.palych.io *.psykiatrien.palych.io *.richmond.palych.io *.roblox.palych.io *.state.palych.io *.trabajo.palych.io *.ungdomsboka.palych.io *.v2.palych.io
peshitta.com *.peshitta.com
*.ls.puapua10.xyz *.ly.puapua10.xyz *.lz.puapua10.xyz puapua10.xyz *.puapua10.xyz *.si.puapua10.xyz *.sl.puapua10.xyz *.ss.puapua10.xyz *.sy.puapua10.xyz *.yl.puapua10.xyz *.yy.puapua10.xyz *.zl.puapua10.xyz *.zy.puapua10.xyz
*.autodiscover.rede.email rede.email *.rede.email *.webdisk.rede.email
*.app.wwwquickbooks.com *.ww38.wwwquickbooks.com wwwquickbooks.com *.wwwquickbooks.com
*.beta.yorebre.click *.staging.yorebre.click *.ww38.yorebre.click yorebre.click *.yorebre.click
*.chapman-owner.zmub.com *.comune.zmub.com *.faulkner-who.zmub.com *.m.zmub.com *.mx.zmub.com *.www.zmub.com zmub.com *.zmub.com