Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=diymanufacturing.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 19, 2026
Valid Until
December 18, 2026
57 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
50:98:07:EE:1D:47:3E:26:FE:89:F1:DC:9E:34:5F:B5:28:DD:08:5D:6E:AB:28:4A:3B:0D:0D:FE:C7:29:BC:D9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
87 domains
beritamedan.com
*.beritamedan.com
*.data.beritamedan.com
*.sitemap.beritamedan.com
*.api.chikanamulaga.com
*.autodiscover.chikanamulaga.com
*.backend.chikanamulaga.com
chikanamulaga.com
*.chikanamulaga.com
*.dev.chikanamulaga.com
*.mail.chikanamulaga.com
*.sitemap.chikanamulaga.com
*.webmail.chikanamulaga.com
*.chke3i.devochann.com
devochann.com
*.devochann.com
diymanufacturing.com
*.diymanufacturing.com
*.random.diymanufacturing.com
*.staging.diymanufacturing.com
*.admin.dulichphuquoc.net
*.api.dulichphuquoc.net
*.app.dulichphuquoc.net
*.assets.dulichphuquoc.net
*.backup.dulichphuquoc.net
*.blog.dulichphuquoc.net
*.dashboard.dulichphuquoc.net
*.dashs.dulichphuquoc.net
*.demo.dulichphuquoc.net
*.dev.dulichphuquoc.net
dulichphuquoc.net
*.dulichphuquoc.net
*.hostmaster.dulichphuquoc.net
*.lgshohostmaster.dulichphuquoc.net
*.m.dulichphuquoc.net
*.mail.dulichphuquoc.net
*.mailer.dulichphuquoc.net
*.marketing.dulichphuquoc.net
*.qa.dulichphuquoc.net
*.remote.dulichphuquoc.net
*.rodstiretown.dulichphuquoc.net
*.secure.dulichphuquoc.net
*.staging.dulichphuquoc.net
*.stg.dulichphuquoc.net
*.test.dulichphuquoc.net
*.uat.dulichphuquoc.net
*.v1.dulichphuquoc.net
*.v2.dulichphuquoc.net
*.vpn.dulichphuquoc.net
*.web.dulichphuquoc.net
*.webmail.dulichphuquoc.net
*.wildcard.dulichphuquoc.net
*.www.dulichphuquoc.net
*.com.getawesometvapp.com
getawesometvapp.com
*.getawesometvapp.com
*.random.getawesometvapp.com
*.auth.helios168.bet
helios168.bet
*.helios168.bet
*.ar.hoteldelapointefouesnant.com
*.db.hoteldelapointefouesnant.com
*.dyn.hoteldelapointefouesnant.com
hoteldelapointefouesnant.com
*.hoteldelapointefouesnant.com
*.hotels.hoteldelapointefouesnant.com
*.media.hoteldelapointefouesnant.com
*.old2.hoteldelapointefouesnant.com
*.trac.hoteldelapointefouesnant.com
*.work.hoteldelapointefouesnant.com
*.ww3.hoteldelapointefouesnant.com
*.www.hoteldelapointefouesnant.com
looklearn.net
*.looklearn.net
*.x.looklearn.net
*.y5d.looklearn.net
*.corp.playdoit.bet
*.dev.playdoit.bet
playdoit.bet
*.playdoit.bet
pleaserateme.com
*.pleaserateme.com
*.tech.pleaserateme.com
*.backup.wonderartsstudio.com
*.hostmaster.wonderartsstudio.com
wonderartsstudio.com
*.wonderartsstudio.com
Other domains in certificate