76/100 SECURITY SCORE

Certificate Information

Subject
CN=dlqss.claims
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 04, 2026
Valid Until
July 03, 2026 54 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
89:C0:AB:B3:1E:DB:92:14:FD:04:01:73:43:5F:66:A0:71:26:7D:E9:50:0B:61:D9:2B:13:1A:50:7F:85:F0:A5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
igtechflow.com *.igtechflow.com

Other domains in certificate

dlqss.claims *.dlqss.claims
dockerhardenedartifacts.com *.dockerhardenedartifacts.com
dockerhardenedcatalog.com *.dockerhardenedcatalog.com
dockerhardenedimages.com *.dockerhardenedimages.com
dovetaildesigngroup.com *.dovetaildesigngroup.com
dpaa.org *.dpaa.org
drivinggames.in *.drivinggames.in
drjamesdsilva.com *.drjamesdsilva.com
dsbmgt.com *.dsbmgt.com
dukunrtp.info *.dukunrtp.info
dwjwl2irjwludzp.top *.dwjwl2irjwludzp.top
eaglearmorgh.com *.eaglearmorgh.com
ebonysistersclubnewyork.com *.ebonysistersclubnewyork.com
equestrianrecruitment.com *.equestrianrecruitment.com
erokorpenergy.com *.erokorpenergy.com
escofanengineering.com *.escofanengineering.com
farmingweb.com *.farmingweb.com
financiarcochesinnominaes.today *.financiarcochesinnominaes.today
fire-bet788.com *.fire-bet788.com
firstclasstravel.net *.firstclasstravel.net
fitness-apps-s2025ss.sbs *.fitness-apps-s2025ss.sbs
fix-media-handwerk.com *.fix-media-handwerk.com
fl3dag-gov.top *.fl3dag-gov.top
flannelrobes.com *.flannelrobes.com
floursacktowels.in *.floursacktowels.in
fpedt.dev *.fpedt.dev
fueldrive.icu *.fueldrive.icu
gaurisl.com *.gaurisl.com
givethegiftofhappy.com *.givethegiftofhappy.com
glendale.in *.glendale.in
grupoinenka-lat.info *.grupoinenka-lat.info
gzlgldkbusfrler.shop *.gzlgldkbusfrler.shop
h3dp8h9pb8.world *.h3dp8h9pb8.world
highstakeshighroller.quest *.highstakeshighroller.quest
hireoctoagent.com *.hireoctoagent.com
hotstreakgolden.quest *.hotstreakgolden.quest
inpose.co *.inpose.co
invitedeskcloud.com *.invitedeskcloud.com
invitedeskworld.com *.invitedeskworld.com
iplawyernearme.com *.iplawyernearme.com
iprospectdigital.com *.iprospectdigital.com
isgtalentsolutions.com *.isgtalentsolutions.com
janganphisingbos.lol *.janganphisingbos.lol
jlmno.com *.jlmno.com