76/100 SECURITY SCORE

Certificate Information

Subject
CN=eaglopia.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 20, 2025
Valid Until
March 20, 2026 33 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FB:05:A0:03:73:3E:0B:98:2C:9E:4E:CF:3E:BC:3B:D8:BC:A8:24:87:42:87:82:0A:36:CA:91:21:4A:92:1E:2D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
reiseschecks.de *.reiseschecks.de *.admin.reiseschecks.de

Other domains in certificate

aimtrainer.pro *.aimtrainer.pro
alya.life *.alya.life *.com.alya.life *.gov.alya.life
arashi3.eu *.arashi3.eu *.board.arashi3.eu
assaultmolecularjim.com *.assaultmolecularjim.com
bridgetlynnluxurycompanion.com *.bridgetlynnluxurycompanion.com
ccongstar.de *.ccongstar.de *.google.ccongstar.de *.test.ccongstar.de
*.autodiscover.eaglopia.com eaglopia.com *.eaglopia.com *.hospital.eaglopia.com *.local.eaglopia.com *.mail.eaglopia.com *.webmail.eaglopia.com
educatino.com *.educatino.com *.random.educatino.com *.wiki.educatino.com
estateplanning054289.icu *.estateplanning054289.icu
*.0p64.fa1e.cfd *.53y2.fa1e.cfd *.7gza.fa1e.cfd fa1e.cfd *.fa1e.cfd *.vcrv.fa1e.cfd *.ytvf.fa1e.cfd
featherskirts.com *.featherskirts.com *.random.featherskirts.com
*.api.glideapp.tech glideapp.tech *.glideapp.tech
hapusobjek.com *.hapusobjek.com
helsy.store *.helsy.store *.home.helsy.store *.ortor.helsy.store
ilfattoqutidiano.it *.ilfattoqutidiano.it
kamranisrar.com *.kamranisrar.com *.mail.kamranisrar.com *.ww25.kamranisrar.com *.ww38.kamranisrar.com
*.gov.ksb.life ksb.life *.ksb.life *.pay.ksb.life
lolamp.click *.lolamp.click *.sitemaps.lolamp.click
mikado.cc *.mikado.cc
*.app.pyramid.bio *.history.pyramid.bio pyramid.bio *.pyramid.bio *.sitemap.pyramid.bio *.www.pyramid.bio
sarpkayahaliyikama.com *.sarpkayahaliyikama.com
sketshers.de *.sketshers.de
tiktokshop.studio *.tiktokshop.studio
*.random.wagecolorful.com wagecolorful.com *.wagecolorful.com
wwoclap.com *.wwoclap.com
*.com.ytevietduc.com ytevietduc.com *.ytevietduc.com
zekiswimwear.com *.zekiswimwear.com