SSL Certificate Analysis for avence.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Certificate Information

Subject

CN=ip-location.info

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

February 06, 2026

Valid Until

May 07, 2026 86 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

F4:C0:C1:6C:EF:2F:98:40:FD:6D:F9:6A:04:C6:F2:9C:75:21:57:75:F6:55:D4:30:63:C8:5E:CB:F5:C7:2D:D6

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

avence.com *.avence.com *.cartier.avence.com *.minefi1.avence.com

Other domains in certificate

4sex2u.us *.4sex2u.us *.after.4sex2u.us *.amber.4sex2u.us *.com.4sex2u.us *.hamilton.4sex2u.us *.kafka.4sex2u.us *.megateen.4sex2u.us *.nudists.4sex2u.us *.puberty.4sex2u.us *.sister.4sex2u.us *.suicide.4sex2u.us *.teen.4sex2u.us *.xing.4sex2u.us

7starhd.moda *.7starhd.moda *.www.7starhd.moda

discopia.com *.discopia.com *.media.discopia.com

*.africa.hostziza.com hostziza.com *.hostziza.com *.southafrica.hostziza.com *.ug.hostziza.com

ip-location.info *.ip-location.info *.niri.ip-location.info *.quto.ip-location.info *.rori.ip-location.info *.sanic.ip-location.info *.tekyh.ip-location.info *.tide.ip-location.info

*.a26ebcec-0464-4abf-b8f2-2be6aa9376a5.myvisajobs.co *.admin.myvisajobs.co *.demo.myvisajobs.co *.efe6dece-db16-4cc4-b3c1-8f2359d3fd84.myvisajobs.co *.m.myvisajobs.co *.mta-sts.myvisajobs.co myvisajobs.co *.myvisajobs.co *.random.myvisajobs.co *.remote.myvisajobs.co *.wildcard.myvisajobs.co *.ww38.myvisajobs.co *.www.myvisajobs.co

*.br.negocioss.com *.good.negocioss.com negocioss.com *.negocioss.com *.web.negocioss.com

sachabaroncohen.com *.sachabaroncohen.com *.ww1.sachabaroncohen.com *.ww17.sachabaroncohen.com

*.directory.theweddingteam.com theweddingteam.com *.theweddingteam.com