76/100 SECURITY SCORE

Certificate Information

Subject
CN=unionwebhosting.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 05, 2026
Valid Until
May 06, 2026 73 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
85:8D:2C:69:03:A6:9C:BB:B5:D3:01:FF:A0:DB:4C:83:4E:F2:40:7D:2D:35:9B:16:AB:0A:F8:49:D4:92:72:CB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
grenser.com *.grenser.com *.email.grenser.com *.hostmaster.grenser.com

Other domains in certificate

az888.click *.az888.click *.portal.az888.click
*.admin.casqueantibruit.com *.api.casqueantibruit.com *.app.casqueantibruit.com *.assets.casqueantibruit.com *.audio.casqueantibruit.com casqueantibruit.com *.casqueantibruit.com *.dev.casqueantibruit.com *.hostmaster.casqueantibruit.com *.m.casqueantibruit.com *.mail.casqueantibruit.com *.members.casqueantibruit.com *.metric.casqueantibruit.com *.novo.casqueantibruit.com *.test.casqueantibruit.com *.www.casqueantibruit.com *.yudfpaudio.casqueantibruit.com
*.analytic.chipin.it chipin.it *.chipin.it
destainstall.com *.destainstall.com
eharlequine.com *.eharlequine.com *.ww25.eharlequine.com
eupharma.site *.eupharma.site *.ww38.eupharma.site
firstdown.it *.firstdown.it *.www.firstdown.it
*.backend.formidabili.com formidabili.com *.formidabili.com *.hostmaster.formidabili.com
*.app.istituire.com *.dashboard.istituire.com istituire.com *.istituire.com
*.auth1.milicevic.com milicevic.com *.milicevic.com *.myapps2.milicevic.com *.portal1.milicevic.com *.rds2.milicevic.com *.remoteapp1.milicevic.com *.sitemaps.milicevic.com *.vdi2.milicevic.com *.ww11.milicevic.com
mymembersbenefit.com *.mymembersbenefit.com
o-crafte.ru *.o-crafte.ru
pendalerning.com *.pendalerning.com
*.flow.powercoolair.online *.flowise.powercoolair.online *.mail.powercoolair.online *.ns2.powercoolair.online powercoolair.online *.powercoolair.online *.salepage.powercoolair.online *.webmail.powercoolair.online
*.net.sainz.org sainz.org *.sainz.org
*.15d05102-3c8e-46ed-9ce5-376efaa5909d.traffic-equalizer.com *.autodiscover.traffic-equalizer.com *.dev.traffic-equalizer.com *.ftp.traffic-equalizer.com traffic-equalizer.com *.traffic-equalizer.com *.uat.traffic-equalizer.com *.ww25.traffic-equalizer.com *.www.traffic-equalizer.com *.wwww.traffic-equalizer.com
*.sjdogrds.unionwebhosting.com unionwebhosting.com *.unionwebhosting.com
*.cytest.wiflix-stream.com wiflix-stream.com *.wiflix-stream.com *.ww25.wiflix-stream.com