Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=mightykhans.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 20, 2026
Valid Until
January 18, 2027 81 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
44:D9:F9:CE:7C:DC:94:C7:7B:A2:6A:92:1E:8D:03:35:4B:20:EC:F6:B8:53:83:0D:54:77:48:8B:9A:B6:49:D9
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
bsnkrate.com *.bsnkrate.com *.1.bsnkrate.com *.admin.bsnkrate.com *.blog.bsnkrate.com *.data.bsnkrate.com *.dev.bsnkrate.com *.forum.bsnkrate.com *.help.bsnkrate.com *.intelligence.bsnkrate.com *.ns1.bsnkrate.com *.ns2.bsnkrate.com *.old.bsnkrate.com *.remote.bsnkrate.com *.shop.bsnkrate.com *.store.bsnkrate.com *.superset.bsnkrate.com *.wiki.bsnkrate.com *.ww7.bsnkrate.com *.ww9.bsnkrate.com

Other domains in certificate

*.campaign.coopscorimouski.com coopscorimouski.com *.coopscorimouski.com *.http.coopscorimouski.com *.m.coopscorimouski.com *.mz.coopscorimouski.com *.na.coopscorimouski.com *.ni.coopscorimouski.com *.serv.coopscorimouski.com
dueling.org *.dueling.org *.vpngate.dueling.org
*.egame.elevenroofing.com elevenroofing.com *.elevenroofing.com *.getstylin.elevenroofing.com *.newsample.elevenroofing.com *.optimal.elevenroofing.com *.paidtrial.elevenroofing.com
*.afd.guazisp.autos *.amx.guazisp.autos *.and.guazisp.autos *.anq.guazisp.autos *.aqd.guazisp.autos *.arp.guazisp.autos *.bha.guazisp.autos *.bis.guazisp.autos *.bnk.guazisp.autos *.bse.guazisp.autos *.dat.guazisp.autos *.dgw.guazisp.autos *.dnz.guazisp.autos *.dog.guazisp.autos *.elk.guazisp.autos *.eyk.guazisp.autos *.fcv.guazisp.autos *.ffl.guazisp.autos guazisp.autos *.guazisp.autos *.ksn.guazisp.autos *.lwh.guazisp.autos *.qag.guazisp.autos *.qgm.guazisp.autos *.rez.guazisp.autos *.ujg.guazisp.autos *.wxl.guazisp.autos *.yac.guazisp.autos
lepetitchateauinn.com *.lepetitchateauinn.com *.staging-api.lepetitchateauinn.com *.ww25.lepetitchateauinn.com *.wx.lepetitchateauinn.com
*.m.mightykhans.com mightykhans.com *.mightykhans.com *.ww38.mightykhans.com *.www.mightykhans.com
*.edu.mvpprotrader.com mvpprotrader.com *.mvpprotrader.com *.ww25.mvpprotrader.com
*.api.pininterest.co.uk *.bi.pininterest.co.uk *.bigdata.pininterest.co.uk *.dashs.pininterest.co.uk *.m.pininterest.co.uk *.notexistsdemo.pininterest.co.uk pininterest.co.uk *.pininterest.co.uk