Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=imacademy.us
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 19, 2026
Valid Until
January 17, 2027
71 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
28:6B:3F:AC:9E:E6:66:B3:F4:42:6F:9C:1B:CA:EE:98:81:9A:55:DA:60:57:E8:AA:88:5A:54:23:3C:A7:0B:BB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
bansomes.com
*.bansomes.com
*.app-bbva.bansomes.com
*.bbva.bansomes.com
*.es-bbva.bansomes.com
*.admin.backgammontournament.com
*.api.backgammontournament.com
backgammontournament.com
*.backgammontournament.com
*.ci.crplumbingandheatingservices.co.uk
crplumbingandheatingservices.co.uk
*.crplumbingandheatingservices.co.uk
*.prod.crplumbingandheatingservices.co.uk
*.production.crplumbingandheatingservices.co.uk
*.a.fecop.com
*.app.fecop.com
*.beta.fecop.com
*.blog.fecop.com
*.d271b319-d34d-4c1b-8782-f8a2b8289dff.fecop.com
fecop.com
*.fecop.com
*.gateway.fecop.com
*.geyrpwovn.fecop.com
*.mail.fecop.com
*.mi.fecop.com
*.nas.fecop.com
*.pop.fecop.com
*.rd.fecop.com
*.rds.fecop.com
*.rflfqsg.fecop.com
*.uefircr.fecop.com
*.whm.fecop.com
*.wildcard.fecop.com
*.wovn.fecop.com
*.www.fecop.com
*.admin.imacademy.us
*.ai.imacademy.us
*.arena.imacademy.us
*.autodiscover.imacademy.us
*.cosman.imacademy.us
*.cpcalendars.imacademy.us
*.cpcontacts.imacademy.us
*.csg.imacademy.us
*.espanol.imacademy.us
*.exit-popup.imacademy.us
*.facebook-com.imacademy.us
*.facebook.imacademy.us
*.finance.imacademy.us
*.gridpp.imacademy.us
*.health.imacademy.us
*.herbalife.imacademy.us
*.hotfix.imacademy.us
*.hsbc.imacademy.us
*.iad.imacademy.us
imacademy.us
*.imacademy.us
*.isg.imacademy.us
*.mail.imacademy.us
*.members.imacademy.us
*.membership.imacademy.us
*.net.imacademy.us
*.petitions.imacademy.us
*.pipeline.imacademy.us
*.ppls.imacademy.us
*.report.imacademy.us
*.roslin.imacademy.us
*.sandbox.imacademy.us
*.sasg.imacademy.us
*.shca.imacademy.us
*.staffmail.imacademy.us
*.support.imacademy.us
*.team.imacademy.us
*.toyota.imacademy.us
*.users.imacademy.us
*.webdisk.imacademy.us
*.ww16.imacademy.us
*.ww17.imacademy.us
lapuvava.store
*.lapuvava.store
*.ww38.lapuvava.store
lifeinsured.com
*.lifeinsured.com
*.portal.lifeinsured.com
*.qa.lifeinsured.com
*.ts.lifeinsured.com
madarascans.co
*.madarascans.co
*.ww16.madarascans.co
Other domains in certificate