Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=plaisted.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 07, 2026
Valid Until
January 05, 2027
75 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
EF:CD:3B:1F:1D:F1:06:D3:0C:63:1C:52:E6:B1:95:F4:1B:68:AE:F7:20:52:CA:B3:F1:D4:5A:F7:3E:4D:65:90
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
plaisted.com
*.plaisted.com
*.0uuopwnk4jh7c1t5.plaisted.com
*.admin.plaisted.com
*.ads.plaisted.com
*.app.plaisted.com
*.auth.plaisted.com
*.beacon.plaisted.com
*.blogs.plaisted.com
*.bupt.plaisted.com
*.charles.plaisted.com
*.dating.plaisted.com
*.dzjt.plaisted.com
*.events.plaisted.com
*.ffffffffffff.plaisted.com
*.garrick.plaisted.com
*.help.plaisted.com
*.hostmaster.plaisted.com
*.images.plaisted.com
*.img.plaisted.com
*.india.plaisted.com
*.letter.plaisted.com
*.msk.plaisted.com
*.opac.plaisted.com
*.partner.plaisted.com
*.pub.plaisted.com
*.rlsbj.plaisted.com
*.server.plaisted.com
*.test.plaisted.com
*.ww25.plaisted.com
curvedream.uk
*.curvedream.uk
*.ftp.curvedream.uk
*.uat.curvedream.uk
*.v1.curvedream.uk
*.wildcard.curvedream.uk
*.www1.curvedream.uk
*.blog.decadesbandwales.co.uk
decadesbandwales.co.uk
*.decadesbandwales.co.uk
*.admin.delongi.co.uk
*.app.delongi.co.uk
*.arepoint.delongi.co.uk
*.assets.delongi.co.uk
*.backend.delongi.co.uk
*.dashboard.delongi.co.uk
delongi.co.uk
*.delongi.co.uk
*.m.delongi.co.uk
*.staging.delongi.co.uk
*.superset.delongi.co.uk
*.visual.delongi.co.uk
*.ww1.delongi.co.uk
flashsal3.io
*.flashsal3.io
*.random.flashsal3.io
*.admin.laluxe.net
*.app.laluxe.net
*.backend.laluxe.net
laluxe.net
*.laluxe.net
*.test.laluxe.net
*.webmail.laluxe.net
*.cloud.littlewarblers.co.uk
littlewarblers.co.uk
*.littlewarblers.co.uk
*.mx.littlewarblers.co.uk
magicadz.co
*.magicadz.co
*.portal.magicadz.co
*.alpha.pintsizedfashionista.co.uk
pintsizedfashionista.co.uk
*.pintsizedfashionista.co.uk
*.redash.pintsizedfashionista.co.uk
*.pay.realestateexpert.homes
realestateexpert.homes
*.realestateexpert.homes
*.billingxink.xinksoft.co.in
*.crm.xinksoft.co.in
*.learninglms.xinksoft.co.in
*.logistics.xinksoft.co.in
*.real.xinksoft.co.in
*.saloon.xinksoft.co.in
*.school.xinksoft.co.in
*.sumangal.xinksoft.co.in
*.tourdashboard.xinksoft.co.in
*.tracking.xinksoft.co.in
xinksoft.co.in
*.xinksoft.co.in
Other domains in certificate