Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=x-a.vip
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 15, 2026
Valid Until
May 16, 2026 79 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:74:B1:1F:1F:40:19:50:B8:04:24:5A:E0:4A:BF:19:A3:3F:48:A0:A0:9E:F4:BF:4E:CA:AA:50:48:59:18:20
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

79 domains
cjilis.com *.cjilis.com *.hostmaster.cjilis.com *.random.cjilis.com

Other domains in certificate

apothecary.solutions *.apothecary.solutions
bukasitus.vip *.bukasitus.vip *.main.bukasitus.vip *.vip.bukasitus.vip *.yuk.bukasitus.vip
canadapharmacy.guru *.canadapharmacy.guru
cgtcatalunya.org *.cgtcatalunya.org
*.beta.desperados-game.com desperados-game.com *.desperados-game.com *.random.desperados-game.com *.ww01.desperados-game.com *.ww25.desperados-game.com
deucker-zubehoer.de *.deucker-zubehoer.de
jellyenglishschool.com *.jellyenglishschool.com
*.benfolkethomas.lincolnsnose.com *.blog4d.lincolnsnose.com *.com.lincolnsnose.com lincolnsnose.com *.lincolnsnose.com *.mail.lincolnsnose.com *.online.lincolnsnose.com *.sbs.lincolnsnose.com *.site.lincolnsnose.com *.www.lincolnsnose.com *.xyz.lincolnsnose.com
lkm.au *.lkm.au *.random.lkm.au
maeermine.info *.maeermine.info
*.booking.payments.net.au payments.net.au *.payments.net.au
popcorn-capital.com *.popcorn-capital.com
scallops.online *.scallops.online
serasacertificado.com.br *.serasacertificado.com.br
*.comp.smiggle.uk *.m.smiggle.uk *.mail.smiggle.uk *.mqsicr.smiggle.uk *.owa.smiggle.uk *.secure.smiggle.uk smiggle.uk *.smiggle.uk *.smigglespikeys.smiggle.uk *.ww25.smiggle.uk
stromvergleichsseiten.de *.stromvergleichsseiten.de
thumtrack.com *.thumtrack.com *.ww38.thumtrack.com
*.qa.tudogostoso.com *.random.tudogostoso.com *.stg.tudogostoso.com tudogostoso.com *.tudogostoso.com *.wwhw.tudogostoso.com
turnaround.services *.turnaround.services
x-a.vip *.x-a.vip
xn--schmetterlingsbltengewchse-1hc97d.de *.xn--schmetterlingsbltengewchse-1hc97d.de
yourbeatswithai.com *.yourbeatswithai.com