93/100 SECURITY SCORE

Certificate Information

Subject
CN=melessa.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 09, 2026
Valid Until
February 07, 2027 85 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
CD:56:EF:B1:0D:83:64:F3:EC:BE:C0:E6:2B:39:26:A7:6E:34:CF:2C:60:31:17:17:0F:B9:B3:33:50:F6:18:85
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; script-src; script-src-attr; +8 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
accelerometer=(), camera=(), clipboard-read=(); +13 more
Recommendations
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
guiasaude.com *.guiasaude.com *.app.guiasaude.com

Other domains in certificate

95v.top *.95v.top *.apbtiw.95v.top *.apikey.95v.top *.bt.95v.top *.csdn.95v.top *.ejxcpm.95v.top *.fh.95v.top *.ljsurl.95v.top *.mi.95v.top *.sc.95v.top *.ww17.95v.top *.ym.95v.top *.ys.95v.top *.yzf.95v.top *.zyw.95v.top
*.app.asusqcodes.com asusqcodes.com *.asusqcodes.com
*.adobe.bbaiaile.com bbaiaile.com *.bbaiaile.com
*.admin.biblegpt.xyz biblegpt.xyz *.biblegpt.xyz
*.admin.blackworks.it blackworks.it *.blackworks.it *.hostmaster.blackworks.it
closes.com.au *.closes.com.au
*.app.cvflow.live cvflow.live *.cvflow.live
headway-headquarters.com *.headway-headquarters.com *.random.headway-headquarters.com *.ww17.headway-headquarters.com
jlzzhut.com *.jlzzhut.com *.wildcard.jlzzhut.com
*.app.lolsurvery.co *.beta.lolsurvery.co *.dev.lolsurvery.co lolsurvery.co *.lolsurvery.co
marcmessage20.com *.marcmessage20.com
*.beta.melessa.com melessa.com *.melessa.com
*.jamp.moneysquare.com moneysquare.com *.moneysquare.com
musclewili.com *.musclewili.com
pelisflixhd.guru *.pelisflixhd.guru
*.dashboard.pkcbirddus.net pkcbirddus.net *.pkcbirddus.net *.portal.pkcbirddus.net
*.app.ss13.vip ss13.vip *.ss13.vip
*.mx.thirdworldpressbooks.com thirdworldpressbooks.com *.thirdworldpressbooks.com
*.atenea.usphospitales.com *.citaonline.usphospitales.com *.directorio.usphospitales.com *.estadocamas.usphospitales.com usphospitales.com *.usphospitales.com *.ww16.usphospitales.com
*.app.xinetwork.co *.coinflix.xinetwork.co *.idol.xinetwork.co *.idolraffytulfo.xinetwork.co *.papadudut.xinetwork.co *.phflix.xinetwork.co *.phi.xinetwork.co *.random.xinetwork.co *.report.xinetwork.co *.ww25.xinetwork.co xinetwork.co *.xinetwork.co