75/100 SECURITY SCORE

Certificate Information

Subject
CN=stockportnews.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 13, 2026
Valid Until
December 12, 2026 40 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
65:22:65:B2:F8:55:DB:14:AE:D4:7A:A1:77:60:45:F5:D0:86:C8:CB:F7:C3:8F:D8:3A:DA:CA:39:32:A4:1D:97
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

78 domains
drasticamente.it *.drasticamente.it *.analytics.drasticamente.it *.bi.drasticamente.it *.cloud.drasticamente.it *.correo.drasticamente.it *.email.drasticamente.it *.exch2016.drasticamente.it *.hostmaster.drasticamente.it *.mail1.drasticamente.it *.mail3.drasticamente.it *.metric.drasticamente.it *.mx001.drasticamente.it *.outlook.drasticamente.it *.portal.drasticamente.it *.rd.drasticamente.it *.rdweb.drasticamente.it *.reporting.drasticamente.it *.superset.drasticamente.it *.webmail2013.drasticamente.it

Other domains in certificate

agriturlaura.com *.agriturlaura.com *.careers.agriturlaura.com *.mx.agriturlaura.com *.random.agriturlaura.com *.seo.agriturlaura.com *.ts.agriturlaura.com *.ww25.agriturlaura.com *.ww38.agriturlaura.com *.www.agriturlaura.com
allsports-outlet.com *.allsports-outlet.com
aubergelesglycines.com *.aubergelesglycines.com
bbbyao.com *.bbbyao.com *.ww25.bbbyao.com
bellinzona.net *.bellinzona.net *.mx.bellinzona.net
boilerguy.co.uk *.boilerguy.co.uk
braw1.us *.braw1.us *.m.braw1.us *.ww7.braw1.us
burudaconcert.com *.burudaconcert.com *.hostmaster.burudaconcert.com *.m.burudaconcert.com *.webdisk.burudaconcert.com *.ww25.burudaconcert.com *.ww38.burudaconcert.com *.www.burudaconcert.com
hentaifasm.com *.hentaifasm.com *.hostmaster.hentaifasm.com
moulding.au *.moulding.au *.random.moulding.au
*.analytics.pude.it *.dashboard.pude.it *.hostmaster.pude.it *.intelligence.pude.it *.mx.pude.it *.prof.pude.it pude.it *.pude.it *.report.pude.it *.reporting.pude.it *.smtpauth.pude.it *.superset.pude.it
*.owa.shianet.com shianet.com *.shianet.com
*.mail.stockportnews.com stockportnews.com *.stockportnews.com