Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mightykhans.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 20, 2026
Valid Until
January 18, 2027
81 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
44:D9:F9:CE:7C:DC:94:C7:7B:A2:6A:92:1E:8D:03:35:4B:20:EC:F6:B8:53:83:0D:54:77:48:8B:9A:B6:49:D9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
bsnkrate.com
*.bsnkrate.com
*.1.bsnkrate.com
*.admin.bsnkrate.com
*.blog.bsnkrate.com
*.data.bsnkrate.com
*.dev.bsnkrate.com
*.forum.bsnkrate.com
*.help.bsnkrate.com
*.intelligence.bsnkrate.com
*.ns1.bsnkrate.com
*.ns2.bsnkrate.com
*.old.bsnkrate.com
*.remote.bsnkrate.com
*.shop.bsnkrate.com
*.store.bsnkrate.com
*.superset.bsnkrate.com
*.wiki.bsnkrate.com
*.ww7.bsnkrate.com
*.ww9.bsnkrate.com
*.campaign.coopscorimouski.com
coopscorimouski.com
*.coopscorimouski.com
*.http.coopscorimouski.com
*.m.coopscorimouski.com
*.mz.coopscorimouski.com
*.na.coopscorimouski.com
*.ni.coopscorimouski.com
*.serv.coopscorimouski.com
dueling.org
*.dueling.org
*.vpngate.dueling.org
*.egame.elevenroofing.com
elevenroofing.com
*.elevenroofing.com
*.getstylin.elevenroofing.com
*.newsample.elevenroofing.com
*.optimal.elevenroofing.com
*.paidtrial.elevenroofing.com
*.afd.guazisp.autos
*.amx.guazisp.autos
*.and.guazisp.autos
*.anq.guazisp.autos
*.aqd.guazisp.autos
*.arp.guazisp.autos
*.bha.guazisp.autos
*.bis.guazisp.autos
*.bnk.guazisp.autos
*.bse.guazisp.autos
*.dat.guazisp.autos
*.dgw.guazisp.autos
*.dnz.guazisp.autos
*.dog.guazisp.autos
*.elk.guazisp.autos
*.eyk.guazisp.autos
*.fcv.guazisp.autos
*.ffl.guazisp.autos
guazisp.autos
*.guazisp.autos
*.ksn.guazisp.autos
*.lwh.guazisp.autos
*.qag.guazisp.autos
*.qgm.guazisp.autos
*.rez.guazisp.autos
*.ujg.guazisp.autos
*.wxl.guazisp.autos
*.yac.guazisp.autos
lepetitchateauinn.com
*.lepetitchateauinn.com
*.staging-api.lepetitchateauinn.com
*.ww25.lepetitchateauinn.com
*.wx.lepetitchateauinn.com
*.m.mightykhans.com
mightykhans.com
*.mightykhans.com
*.ww38.mightykhans.com
*.www.mightykhans.com
*.edu.mvpprotrader.com
mvpprotrader.com
*.mvpprotrader.com
*.ww25.mvpprotrader.com
*.api.pininterest.co.uk
*.bi.pininterest.co.uk
*.bigdata.pininterest.co.uk
*.dashs.pininterest.co.uk
*.m.pininterest.co.uk
*.notexistsdemo.pininterest.co.uk
pininterest.co.uk
*.pininterest.co.uk
Other domains in certificate