Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=lousvillewater.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 02, 2026
Valid Until
December 31, 2026 56 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
47:A3:23:44:74:57:9C:D7:4C:CF:3D:A3:83:58:07:5A:F4:A7:8E:A3:DA:03:7D:3A:DB:A0:18:2B:4C:FE:1C:B0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

86 domains
spurl.me *.spurl.me *.cesia-api.spurl.me *.cpcalendars.spurl.me *.hostmaster.spurl.me *.whm.spurl.me

Other domains in certificate

1knph.com *.1knph.com *.admin.1knph.com *.dev.1knph.com *.www.1knph.com
*.apple.colix.com colix.com *.colix.com *.discord.colix.com *.movie4kto.colix.com *.proccbdpwu.colix.com *.prongcloud.colix.com *.ptatic.colix.com *.viola.colix.com
*.blog.forevercrane.com forevercrane.com *.forevercrane.com *.hostmaster.forevercrane.com *.mysql.forevercrane.com
*.app.hypnotherapy.it *.bigdata.hypnotherapy.it *.dashboard.hypnotherapy.it *.dev.hypnotherapy.it *.email.hypnotherapy.it *.forecast.hypnotherapy.it hypnotherapy.it *.hypnotherapy.it *.oaroyblog.hypnotherapy.it *.pop.hypnotherapy.it *.report.hypnotherapy.it *.staging.hypnotherapy.it *.superset.hypnotherapy.it
*.backup.lousvillewater.com *.baf7d3e7-b24f-4358-a078-3ed382e0ac52.lousvillewater.com *.cloud.lousvillewater.com *.dashboard.lousvillewater.com *.ebdisk.lousvillewater.com *.ebmail.lousvillewater.com lousvillewater.com *.lousvillewater.com *.mailer.lousvillewater.com *.marketing.lousvillewater.com *.qa.lousvillewater.com *.random.lousvillewater.com *.rd.lousvillewater.com *.rds.lousvillewater.com *.rdweb.lousvillewater.com *.remote.lousvillewater.com *.secure.lousvillewater.com *.smtp.lousvillewater.com *.staging.lousvillewater.com *.stg.lousvillewater.com *.test.lousvillewater.com *.ts.lousvillewater.com *.vpn.lousvillewater.com *.web.lousvillewater.com *.webdisk.lousvillewater.com *.webmail.lousvillewater.com *.whm.lousvillewater.com *.www.lousvillewater.com
madonalds.co.uk *.madonalds.co.uk *.ww1.madonalds.co.uk
*.admin.naturain.it *.analyze.naturain.it *.api.naturain.it *.app.naturain.it *.dashboard.naturain.it *.demo.naturain.it *.intel.naturain.it *.intelligence.naturain.it *.mx.naturain.it naturain.it *.naturain.it *.notexistsdev.naturain.it *.report.naturain.it *.research.naturain.it *.staging.naturain.it *.status.naturain.it *.superset.naturain.it