75/100 SECURITY SCORE

Certificate Information

Subject
CN=xyuangma.buzz
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 02, 2026
Valid Until
December 31, 2026 51 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F7:24:E5:2C:39:E7:F1:E5:F3:DF:5C:3E:26:C2:8A:6F:FD:6D:8D:26:43:E8:99:EF:10:9A:F0:15:C8:DF:32:E8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

82 domains
tokenpocknet.pro *.tokenpocknet.pro *.app.tokenpocknet.pro *.sitemaps.tokenpocknet.pro

Other domains in certificate

agradecimentos.com *.agradecimentos.com *.beta.agradecimentos.com *.blog.agradecimentos.com *.emv1.agradecimentos.com *.mail.agradecimentos.com *.test.agradecimentos.com *.ww1.agradecimentos.com *.ww16.agradecimentos.com *.ww25.agradecimentos.com
cardsite.help *.cardsite.help *.m.cardsite.help
designsbycalley.com *.designsbycalley.com
dnr-jackets.com *.dnr-jackets.com *.mail.dnr-jackets.com
*.corporate.hegosun.com *.develop.hegosun.com *.es.hegosun.com hegosun.com *.hegosun.com *.website.hegosun.com
*.beyond.massivewoodlandsafaris.com *.explore.massivewoodlandsafaris.com *.luxurysafari.massivewoodlandsafaris.com *.luxuryshuttle.massivewoodlandsafaris.com *.marariver.massivewoodlandsafaris.com massivewoodlandsafaris.com *.massivewoodlandsafaris.com *.mifelu.massivewoodlandsafaris.com *.my.massivewoodlandsafaris.com *.thesafari.massivewoodlandsafaris.com *.tpcf.massivewoodlandsafaris.com *.vespera.massivewoodlandsafaris.com
*.admin.nerobianco.it *.analytics.nerobianco.it *.dashboard.nerobianco.it *.email.nerobianco.it *.intelligence.nerobianco.it *.mail.nerobianco.it *.mywebmail.nerobianco.it nerobianco.it *.nerobianco.it *.outlook.nerobianco.it *.owa.nerobianco.it *.rds.nerobianco.it *.remote.nerobianco.it *.ssl.nerobianco.it *.superset.nerobianco.it *.vdi.nerobianco.it
shoptim.us *.shoptim.us *.www.shoptim.us
*.admin.snackmoney.biz *.api.snackmoney.biz *.app.snackmoney.biz *.backend.snackmoney.biz *.bgptools-wildcard-confirmed.snackmoney.biz *.demo.snackmoney.biz *.dev.snackmoney.biz *.hostmaster.snackmoney.biz *.mail.snackmoney.biz *.random.snackmoney.biz *.sitemaps.snackmoney.biz snackmoney.biz *.snackmoney.biz *.staging.snackmoney.biz *.ww1.snackmoney.biz *.ww7.snackmoney.biz
theluminarii.org *.theluminarii.org *.victoriaztan.theluminarii.org
*.tyw23kr5.xyuangma.buzz *.x1w2eu.xyuangma.buzz xyuangma.buzz *.xyuangma.buzz