Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=asstars.app
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 12, 2026
Valid Until
July 11, 2026
56 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:CD:C3:5F:AC:6A:E1:07:83:9D:FC:58:82:6D:33:33:BF:23:A1:BF:DF:A1:B5:EF:15:2A:5D:0F:DB:0C:0C:79
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
jjhouse.dk
*.jjhouse.dk
*.blogs.jjhouse.dk
*.course.jjhouse.dk
*.cpcontacts.jjhouse.dk
*.dev.jjhouse.dk
*.f5468f39-b9d5-4444-b6e0-9c295762e5be.jjhouse.dk
*.m.jjhouse.dk
*.media.jjhouse.dk
*.rd.jjhouse.dk
*.vps.jjhouse.dk
*.www.jjhouse.dk
*.416237b2-ab0f-42dd-99cd-5c7dd301e8e2.asstars.app
*.acc.asstars.app
asstars.app
*.asstars.app
*.dev.asstars.app
*.matomo.asstars.app
*.oud.asstars.app
*.sms.asstars.app
*.sslvpn.asstars.app
*.staging.asstars.app
*.traefik.asstars.app
*.web.asstars.app
*.webshop.asstars.app
*.backup.boost-digital.live
*.bc03e4ff-cd20-4789-b3fc-d42565a82f6c.boost-digital.live
boost-digital.live
*.boost-digital.live
*.cloudvpn.boost-digital.live
*.dev.boost-digital.live
*.dolibarr.boost-digital.live
*.eac74b5e-dad1-4ecc-a1b7-e3b7a52d8ad7.boost-digital.live
*.marketing.boost-digital.live
*.secure.boost-digital.live
*.srsomtest.boost-digital.live
*.staging.boost-digital.live
*.v2.boost-digital.live
*.web.boost-digital.live
*.6changes.chrisgregoire.com
*.api4animals.chrisgregoire.com
chrisgregoire.com
*.chrisgregoire.com
*.dadgonemad.chrisgregoire.com
*.glasscraftsman.chrisgregoire.com
*.health-naturale.chrisgregoire.com
*.sony-cp.chrisgregoire.com
*.webmail.chrisgregoire.com
*.ww25.chrisgregoire.com
*.www.chrisgregoire.com
*.cdn.directhalo.info
directhalo.info
*.directhalo.info
*.ssh.directhalo.info
*.store.directhalo.info
*.support.directhalo.info
*.79663998-2f89-4cd6-a63b-cafc24fce43c.fidhelp.org
*.admin.fidhelp.org
*.alpha.fidhelp.org
*.api.fidhelp.org
*.app.fidhelp.org
*.backend.fidhelp.org
*.cicd-demo.fidhelp.org
*.dashboard.fidhelp.org
*.data.fidhelp.org
*.demo.fidhelp.org
*.dev.fidhelp.org
fidhelp.org
*.fidhelp.org
*.ghpstaff.fidhelp.org
*.home.fidhelp.org
*.igtawapi.fidhelp.org
*.m.fidhelp.org
*.mail.fidhelp.org
*.mobile.fidhelp.org
*.news.fidhelp.org
*.notexistsapi.fidhelp.org
*.notexistsvpn.fidhelp.org
*.sandbox.fidhelp.org
*.staging.fidhelp.org
*.superset.fidhelp.org
*.test.fidhelp.org
*.vpn.fidhelp.org
*.wew.fidhelp.org
*.www.fidhelp.org
*.app.wellbrite.com
*.mail.wellbrite.com
wellbrite.com
*.wellbrite.com
Other domains in certificate