76/100 SECURITY SCORE

Certificate Information

Subject
CN=wns012.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 30, 2026
Valid Until
April 30, 2026 76 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:7E:24:AF:04:78:AC:6E:34:AC:DC:A2:B8:2F:C3:C3:34:07:4A:1C:82:AA:9A:D0:06:3D:50:D0:33:2A:3C:36
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
usaproject.org *.usaproject.org

Other domains in certificate

tisr.com.tw *.tisr.com.tw
prepaidhosting.com *.prepaidhosting.com
qwenlm.biz *.qwenlm.biz
ravf.org *.ravf.org
realdiplom2.top *.realdiplom2.top
redwap.in *.redwap.in
rewards-autonolas.info *.rewards-autonolas.info
rioolafvoerontstoppingsdienst614512.icu *.rioolafvoerontstoppingsdienst614512.icu
riskonnu.com *.riskonnu.com
rpcr.org *.rpcr.org
rpwobeczaglady.pl *.rpwobeczaglady.pl
rutor.in *.rutor.in
ruy3o47.top *.ruy3o47.top
safehomecare.org *.safehomecare.org
sartoriasalino.com *.sartoriasalino.com
sidewalkadvertising.com *.sidewalkadvertising.com
smart-studios.com *.smart-studios.com
smlrgroup.com *.smlrgroup.com
sockshare.tv *.sockshare.tv
sonacall.com *.sonacall.com
srvrhost.lol *.srvrhost.lol
stresser.co *.stresser.co
tdhconsultingservices.com *.tdhconsultingservices.com
thailand-travel313318.icu *.thailand-travel313318.icu
totalinsurancegroup.com *.totalinsurancegroup.com
tourconphung298607.icu *.tourconphung298607.icu
tranwall.com *.tranwall.com
trbonlineexams.in *.trbonlineexams.in
tryrocket.direct *.tryrocket.direct
twowholeworms.eu *.twowholeworms.eu
uniquetradingbd.com *.uniquetradingbd.com
universaldonorcells.com *.universaldonorcells.com
unlimcloud.cloud *.unlimcloud.cloud
useironscales.com *.useironscales.com
vchvjmncvbcjgv.info *.vchvjmncvbcjgv.info
ventureprint.com *.ventureprint.com
virtuallyenhanced.com *.virtuallyenhanced.com
warez.la *.warez.la
watchelectronics.com *.watchelectronics.com
wedding-venues631034.icu *.wedding-venues631034.icu
weightlosshelpusa658388.icu *.weightlosshelpusa658388.icu
wns012.com *.wns012.com
wormmate.io *.wormmate.io
xn--b0t733d.com *.xn--b0t733d.com