SSL Certificate Analysis for bamboro.de - Security Grade & TLS Configuration

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=canvasliveworks.click

Issuer

C=US, O=Let's Encrypt, CN=YR1

Valid From

June 12, 2026

Valid Until

September 10, 2026 77 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

55:A8:2B:63:03:11:0C:69:7B:E9:0A:13:62:64:6C:7D:24:A3:98:63:01:81:16:C8:9E:AE:D5:A6:96:98:DE:01

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin

Permissions-Policy

Present

geolocation=(), midi=(), sync-xhr=(); +6 more

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

bamboro.de *.bamboro.de

Other domains in certificate

265p3.lol *.265p3.lol *.www.265p3.lol

acgy.org *.acgy.org *.api.acgy.org *.backend.acgy.org *.pan.acgy.org *.staging.acgy.org

adeschargar.online *.adeschargar.online

*.9oi5uu.bandoa.shop bandoa.shop *.bandoa.shop *.ww1.bandoa.shop

bines.it *.bines.it

bshgroup.com *.bshgroup.com *.siemens-home.bshgroup.com

canvasliveworks.click *.canvasliveworks.click *.kgp5a4.canvasliveworks.click

dextrality.xyz *.dextrality.xyz *.discord.dextrality.xyz *.website.dextrality.xyz *.wiki.dextrality.xyz

*.accrochages.drone.ws drone.ws *.drone.ws

*.api.easymore.net easymore.net *.easymore.net *.nbtjdm.easymore.net *.rd.easymore.net *.service.easymore.net *.staging.easymore.net

healthandcommunity.org *.healthandcommunity.org *.ww25.healthandcommunity.org

ibelieveinlove.it *.ibelieveinlove.it

*.admin.onemainefinancial.com *.api.onemainefinancial.com *.app.onemainefinancial.com *.assets.onemainefinancial.com *.demo.onemainefinancial.com *.laravel.onemainefinancial.com *.login.onemainefinancial.com *.m.onemainefinancial.com *.members.onemainefinancial.com onemainefinancial.com *.onemainefinancial.com *.store.onemainefinancial.com *.test.onemainefinancial.com *.testing.onemainefinancial.com *.vip.onemainefinancial.com *.w.onemainefinancial.com *.wildcard.onemainefinancial.com

*.dev.pemula84.click pemula84.click *.pemula84.click *.sitemap.pemula84.click *.transactions.pemula84.click

reelpalace.xyz *.reelpalace.xyz

*.mail.reviewtown.me reviewtown.me *.reviewtown.me

rkcinfraprojects.com *.rkcinfraprojects.com *.ww25.rkcinfraprojects.com

*.downloads.walmaer.com *.photos2.walmaer.com *.prod.walmaer.com *.survey.walmaer.com walmaer.com *.walmaer.com *.ww1.walmaer.com *.ww16.walmaer.com

wudi.shop *.wudi.shop *.www.wudi.shop

*.assets.xn--o4w.com xn--o4w.com *.xn--o4w.com *.xx.xn--o4w.com