Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bzggc.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 20, 2026
Valid Until
August 18, 2026
85 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
15:8D:1B:8B:DB:CB:29:17:FF:73:3D:4C:27:D9:63:AF:25:73:4B:EA:41:58:9D:E5:F9:8D:56:1E:0C:9E:A9:74
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
argeint.org
*.argeint.org
*.home.argeint.org
*.rribykwywasitemap.argeint.org
*.www.argeint.org
abwpstaging.com
*.abwpstaging.com
*.cpcontacts.abwpstaging.com
*.en.abwpstaging.com
agencymodelsearch.com
*.agencymodelsearch.com
*.hostmaster.agencymodelsearch.com
*.qdrid5.agencymodelsearch.com
avelapg.co
*.avelapg.co
axhxi.town
*.axhxi.town
b35wz8gh3d.top
*.b35wz8gh3d.top
basa8vip.com
*.basa8vip.com
bebp3f4f.top
*.bebp3f4f.top
bf5ff.cc
*.bf5ff.cc
bornplayer.in
*.bornplayer.in
*.mail.bornplayer.in
buildinginspector.com.au
*.buildinginspector.com.au
*.w.buildinginspector.com.au
*.0rrpr0.bzggc.com
*.1tj1tj.bzggc.com
*.7pjtvlb5.bzggc.com
bzggc.com
*.bzggc.com
*.hostmaster.bzggc.com
*.llnb0b.bzggc.com
*.r6zlfz.bzggc.com
*.beta.celebrate.baby
celebrate.baby
*.celebrate.baby
*.old.celebrate.baby
*.whm.celebrate.baby
dentistsparramatta.com.au
*.dentistsparramatta.com.au
*.ww84.dentistsparramatta.com.au
firstbridgefinancialshop.com
*.firstbridgefinancialshop.com
fitblazer.site
*.fitblazer.site
fqn52.top
*.fqn52.top
frilvia.com
*.frilvia.com
*.access.gulps.it
*.admin.gulps.it
*.demo.gulps.it
gulps.it
*.gulps.it
*.metrics.gulps.it
*.remote.gulps.it
*.superset.gulps.it
*.supersets.gulps.it
learningcenterhow-to.com
*.learningcenterhow-to.com
*.uixqbl.learningcenterhow-to.com
*.corretorvend.lyricaljoyce.com
lyricaljoyce.com
*.lyricaljoyce.com
*.www.lyricaljoyce.com
*.fkpzjz.orbit-leaf.art
orbit-leaf.art
*.orbit-leaf.art
praxis-haehnel.de
*.praxis-haehnel.de
*.admin.pressbook.it
*.backend.pressbook.it
pressbook.it
*.pressbook.it
*.mail.protone.me
protone.me
*.protone.me
*.alumni.rusnabat.com
rusnabat.com
*.rusnabat.com
*.w.rusnabat.com
*.ws.rusnabat.com
*.wss.rusnabat.com
Other domains in certificate