Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=christensenwebdev.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 13, 2026
Valid Until
September 11, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:59:B3:F9:04:75:A0:13:8C:CD:F2:D5:6B:E8:4D:93:C7:93:05:0E:49:E0:DE:26:C1:A7:FF:23:00:98:80:7F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
cineplex.live *.cineplex.live *.cdn.cineplex.live

Other domains in certificate

008tg.com *.008tg.com *.dj.008tg.com *.et.008tg.com *.gf.008tg.com *.ha.008tg.com *.hr.008tg.com *.ht.008tg.com *.ji.008tg.com *.jj.008tg.com *.kc.008tg.com *.mj.008tg.com *.mt.008tg.com *.ra.008tg.com *.rf.008tg.com *.sc.008tg.com
ah4.us *.ah4.us *.xgw4z6.ah4.us
*.app.appllicore.com appllicore.com *.appllicore.com *.dev.appllicore.com
cegla.eu *.cegla.eu *.random.cegla.eu
*.api.christensenwebdev.com christensenwebdev.com *.christensenwebdev.com
corebridgetrading.com *.corebridgetrading.com *.trade.corebridgetrading.com
dailycats.co *.dailycats.co *.wildcard.dailycats.co
herballife.com.au *.herballife.com.au *.ww25.herballife.com.au *.ww38.herballife.com.au
hiivala.com *.hiivala.com
*.hostmaster.jugs.me jugs.me *.jugs.me *.m.jugs.me
*.david.majorfixedmatches.com *.forum.majorfixedmatches.com *.jack.majorfixedmatches.com majorfixedmatches.com *.majorfixedmatches.com *.robert.majorfixedmatches.com *.superset.majorfixedmatches.com *.usa.majorfixedmatches.com
*.group.netcomcu.cc netcomcu.cc *.netcomcu.cc
off---white.co *.off---white.co
outsets.com *.outsets.com *.ww43.outsets.com
*.books.palaustudio.com *.cdn.palaustudio.com *.hr.palaustudio.com *.mx.palaustudio.com *.news.palaustudio.com palaustudio.com *.palaustudio.com
pancreas.com.au *.pancreas.com.au
stillnothere.com *.stillnothere.com
*.5myismo1jteslajh.taliban.com.au taliban.com.au *.taliban.com.au
*.apps.trythefoundersclubhq.sbs trythefoundersclubhq.sbs *.trythefoundersclubhq.sbs
*.admin.ukrainebrides.org *.hostmaster.ukrainebrides.org ukrainebrides.org *.ukrainebrides.org *.www.ukrainebrides.org
undervaluednfts.com *.undervaluednfts.com *.www.undervaluednfts.com