76/100 SECURITY SCORE

Certificate Information

Subject
CN=negoce.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 19, 2026
Valid Until
August 17, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:FF:13:79:87:EB:74:2B:BA:25:F3:08:DA:6E:5A:9C:F5:D6:4E:F5:0D:C5:D9:3E:C0:6E:BB:D2:34:A5:43:A8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
imaginalcells.co *.imaginalcells.co *.admin.imaginalcells.co *.ftp.imaginalcells.co *.imap.imaginalcells.co *.m.imaginalcells.co *.mail.imaginalcells.co *.pop.imaginalcells.co *.smtp.imaginalcells.co

Other domains in certificate

admin138.com *.admin138.com *.sitemap.admin138.com
bannerspromotion.download *.bannerspromotion.download *.fucqjsecure.bannerspromotion.download *.ww12.bannerspromotion.download
dashficlick.info *.dashficlick.info
*.api.luvvixlearn.sbs *.assets.luvvixlearn.sbs *.backup.luvvixlearn.sbs *.dashboard.luvvixlearn.sbs *.demo.luvvixlearn.sbs *.dev.luvvixlearn.sbs *.iguteoby.luvvixlearn.sbs luvvixlearn.sbs *.luvvixlearn.sbs *.mail.luvvixlearn.sbs *.mailer.luvvixlearn.sbs *.qa.luvvixlearn.sbs *.rustore.luvvixlearn.sbs *.secure.luvvixlearn.sbs *.staging.luvvixlearn.sbs *.stg.luvvixlearn.sbs *.test.luvvixlearn.sbs *.web.luvvixlearn.sbs
*.b.negoce.org negoce.org *.negoce.org *.pl.negoce.org
*.anunciossex.sexnavarra.es *.autodiscover.sexnavarra.es *.e0ccde16-437d-49fa-b324-e180389f2efe.sexnavarra.es *.luwhbpfo.sexnavarra.es *.mail.sexnavarra.es sexnavarra.es *.sexnavarra.es
*.4ed22b15-a335-48f9-8962-2668b8f639cb.wapdesi.in *.admin.wapdesi.in *.api.wapdesi.in *.app.wapdesi.in *.asin.wapdesi.in *.backend.wapdesi.in *.bi.wapdesi.in *.blog.wapdesi.in *.cpanel.wapdesi.in *.dashs.wapdesi.in *.data.wapdesi.in *.dev.wapdesi.in *.download1.wapdesi.in *.e.wapdesi.in *.jobs.wapdesi.in *.lcrphe.wapdesi.in *.m.wapdesi.in *.metrics.wapdesi.in *.mmswww.wapdesi.in *.ndom.wapdesi.in *.notexistsapi.wapdesi.in *.notexistsblog.wapdesi.in *.notexistsstaging.wapdesi.in *.notexistsstatic.wapdesi.in *.notexistsww-w.wapdesi.in *.pcfrees0.wapdesi.in *.random.wapdesi.in *.rwww.wapdesi.in *.sd1.wapdesi.in *.secure.wapdesi.in *.server.wapdesi.in *.staging.wapdesi.in *.static.wapdesi.in *.stg.wapdesi.in *.superset.wapdesi.in *.w-ww.wapdesi.in *.w.wapdesi.in wapdesi.in *.wapdesi.in *.whm.wapdesi.in *.ww.wapdesi.in *.wwe.wapdesi.in *.www.wapdesi.in