75/100 SECURITY SCORE

Certificate Information

Subject
CN=intsructure.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026 48 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
61:E2:B9:F8:27:4A:84:AB:F9:9C:CA:54:81:8B:37:1B:51:0D:0B:55:1E:A5:6B:72:64:25:6C:EE:65:95:A7:D5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
intsructure.com *.intsructure.com *.aecm.intsructure.com *.ceu.intsructure.com *.cf.intsructure.com *.dlsz.intsructure.com *.kokomoschools.intsructure.com *.learningspacesg.intsructure.com *.mcpsmd.intsructure.com *.minervavirtual.intsructure.com *.test.intsructure.com *.thevillageschool.intsructure.com *.usls.intsructure.com

Other domains in certificate

aeaonms.com *.aeaonms.com *.ww25.aeaonms.com
avrentals.com.au *.avrentals.com.au
beautyshow.au *.beautyshow.au
beerexpo.au *.beerexpo.au
billigerteleonieren.de *.billigerteleonieren.de
cardealersoftware.com.au *.cardealersoftware.com.au
cashiers.au *.cashiers.au
chatswoodlawyers.au *.chatswoodlawyers.au
drinkingfountain.com.au *.drinkingfountain.com.au *.random.drinkingfountain.com.au
formulare-bfinz.de *.formulare-bfinz.de *.hostmaster.formulare-bfinz.de
funeralcars.com *.funeralcars.com *.www.funeralcars.com
greengp.com.au *.greengp.com.au
hypophosphataemie.de *.hypophosphataemie.de
iced.au *.iced.au
*.ds.inmobiles.com inmobiles.com *.inmobiles.com
ithaka.it *.ithaka.it
kreditei.de *.kreditei.de *.mail.kreditei.de
lifecareinfo.link *.lifecareinfo.link
*.analytic.megaseriesonlinehd.biz megaseriesonlinehd.biz *.megaseriesonlinehd.biz
mikrophthalmus.de *.mikrophthalmus.de
moicrosoft365.com *.moicrosoft365.com
nesidioblastose.de *.nesidioblastose.de *.ww38.nesidioblastose.de
povflix.com *.povflix.com
rasycredit.de *.rasycredit.de
rescues.com.au *.rescues.com.au *.ww25.rescues.com.au
seniorshomefinance.au *.seniorshomefinance.au
thinklabs.com.au *.thinklabs.com.au
tilewarehouse.au *.tilewarehouse.au
*.random.villageresorts.com *.ski.villageresorts.com villageresorts.com *.villageresorts.com *.wildcard.villageresorts.com
xanthinoxidase.de *.xanthinoxidase.de
*.random.xn--berwachungskammera-l6b.de xn--berwachungskammera-l6b.de *.xn--berwachungskammera-l6b.de
xn--herzklappenentzndung-3ec.de *.xn--herzklappenentzndung-3ec.de