Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=3abf3f.lol
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 02, 2026
Valid Until
December 31, 2026
65 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
CA:01:93:67:B5:3C:B2:D0:06:05:21:26:EC:6B:BE:CF:90:DB:85:F7:68:92:25:69:45:A6:0E:04:80:84:B1:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
zbirka.net
*.zbirka.net
*.api.zbirka.net
*.cloud.zbirka.net
*.rds.zbirka.net
*.026fd4.3abf3f.lol
*.0569z9.3abf3f.lol
*.06y848.3abf3f.lol
*.0g3y5l.3abf3f.lol
*.0kfrze.3abf3f.lol
*.0ns7c7.3abf3f.lol
*.0nwouo.3abf3f.lol
*.12czii.3abf3f.lol
*.1679s5.3abf3f.lol
*.19fyq2.3abf3f.lol
*.1iv6uu.3abf3f.lol
*.1mins4.3abf3f.lol
*.26h19z.3abf3f.lol
*.339sbe.3abf3f.lol
3abf3f.lol
*.3abf3f.lol
*.3tmbf3.3abf3f.lol
*.3tqveo.3abf3f.lol
*.460i4a.3abf3f.lol
*.4aa5zv.3abf3f.lol
*.5o6a0w.3abf3f.lol
*.5q9l8a.3abf3f.lol
*.6bexdu.3abf3f.lol
*.6ih8vp.3abf3f.lol
*.78ikht.3abf3f.lol
*.7xoy0i.3abf3f.lol
*.847boc.3abf3f.lol
*.aa0jen.3abf3f.lol
*.arcsfi.3abf3f.lol
*.b3bq20.3abf3f.lol
*.by2sss.3abf3f.lol
*.c4qgnb.3abf3f.lol
*.ciq1rj.3abf3f.lol
*.d8ofw7.3abf3f.lol
*.dg5vtm.3abf3f.lol
*.dj9e9g.3abf3f.lol
*.dru2e5.3abf3f.lol
*.evgo88.3abf3f.lol
*.flyo2r.3abf3f.lol
*.gyokyh.3abf3f.lol
*.h43k22.3abf3f.lol
*.hl84lf.3abf3f.lol
*.hvrciz.3abf3f.lol
*.jf7n5v.3abf3f.lol
*.kny2iq.3abf3f.lol
*.ligfh3.3abf3f.lol
*.mdhe1r.3abf3f.lol
*.mjnc3d.3abf3f.lol
*.mkevta.3abf3f.lol
*.n4vo9f.3abf3f.lol
*.oly2en.3abf3f.lol
*.op0dp9.3abf3f.lol
*.pddh3s.3abf3f.lol
*.puoqrq.3abf3f.lol
*.t0bo0e.3abf3f.lol
*.uffsuc.3abf3f.lol
*.vi4wgx.3abf3f.lol
*.xlffb5.3abf3f.lol
*.y8en4y.3abf3f.lol
*.yed990.3abf3f.lol
*.ygii69.3abf3f.lol
*.z1ehiq.3abf3f.lol
*.3ncap3.6nac7b.mom
6nac7b.mom
*.6nac7b.mom
*.8i4v11.6nac7b.mom
*.a195cy.6nac7b.mom
*.f8ulis.6nac7b.mom
*.i9m6dj.6nac7b.mom
*.4y360j.9m7t6c.lol
*.6idl5g.9m7t6c.lol
*.6ldgai.9m7t6c.lol
*.7d49im.9m7t6c.lol
*.94v7pl.9m7t6c.lol
9m7t6c.lol
*.9m7t6c.lol
*.9r3zc4.9m7t6c.lol
*.iqoi13.9m7t6c.lol
*.nemfd0.9m7t6c.lol
*.s50yke.9m7t6c.lol
thep3214.cc
*.thep3214.cc
xvxvxv3.xyz
*.xvxvxv3.xyz
Other domains in certificate