Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=climbinggear.com.au
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
September 06, 2026
Valid Until
December 05, 2026
85 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AD:6E:6B:FA:47:6B:A6:90:EC:A3:F4:B1:16:E0:41:CF:6E:FA:35:AB:76:DE:B6:A6:22:E6:B4:59:82:FF:5A:50
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
78 domains
asusgaming.ru
*.asusgaming.ru
bathroomfinder.com.au
*.bathroomfinder.com.au
*.random.bathroomfinder.com.au
bicyclingambassadors.org
*.bicyclingambassadors.org
*.random.bicyclingambassadors.org
*.ww25.bicyclingambassadors.org
*.ww38.bicyclingambassadors.org
climbinggear.com.au
*.climbinggear.com.au
dbacks.store
*.dbacks.store
*.comunidad.enase.com
enase.com
*.enase.com
*.img1-fg.enase.com
*.les.enase.com
ferroviadellostato.it
*.ferroviadellostato.it
*.hostmaster.ferroviadellostato.it
*.www.ferroviadellostato.it
hoteltidioute.com
*.hoteltidioute.com
kiba.au
*.kiba.au
*.random.kiba.au
*.ww25.kiba.au
kooora-livee.live
*.kooora-livee.live
lived.com.au
*.lived.com.au
*.mail.lived.com.au
*.r.lived.com.au
loafer.au
*.loafer.au
localbusinesswebsites.com.au
*.localbusinesswebsites.com.au
*.ww38.localbusinesswebsites.com.au
*.32.natur-product.pro
natur-product.pro
*.natur-product.pro
ollaollacrepes.com
*.ollaollacrepes.com
*.hostmaster.plenyofhoes.com
plenyofhoes.com
*.plenyofhoes.com
*.random.plenyofhoes.com
*.comww9.pornhuzb.com
*.mx7.pornhuzb.com
pornhuzb.com
*.pornhuzb.com
rinnovamento.com
*.rinnovamento.com
rockmania.it
*.rockmania.it
*.admin.sipuo.it
*.api.sipuo.it
sipuo.it
*.sipuo.it
trujillos.com
*.trujillos.com
typint.co
*.typint.co
vesvnorme.net
*.vesvnorme.net
*.ww16.vesvnorme.net
*.vacancy.vrabote.me
vrabote.me
*.vrabote.me
walaschekasphaltservices.com
*.walaschekasphaltservices.com
wbnewstoday.com
*.wbnewstoday.com
*.ww38.yarv.pro
yarv.pro
*.yarv.pro
Other domains in certificate