76/100 SECURITY SCORE

Certificate Information

Subject
CN=squaredealmedia.in
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 27, 2026
Valid Until
April 27, 2026 78 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DF:37:C0:A2:8E:47:08:9C:63:4E:3B:5F:5E:24:BC:2C:FB:0C:72:A4:E7:98:B4:89:C4:5B:97:69:C0:FD:2E:AF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
squaredealmedia.in *.squaredealmedia.in

Other domains in certificate

*.70ssnitch.carrdd.co *.93snevermind.carrdd.co carrdd.co *.carrdd.co *.eunkoo.carrdd.co *.gxasai.carrdd.co *.perfect-ten.carrdd.co *.shotaiga.carrdd.co *.sukyo.carrdd.co *.wordsofribkin.carrdd.co
*.bes.cisbenifits.org cisbenifits.org *.cisbenifits.org
*.api.cooptires.com *.br.cooptires.com cooptires.com *.cooptires.com *.e.cooptires.com *.elearning.cooptires.com *.fb.cooptires.com *.help.cooptires.com *.mobi.cooptires.com *.origin.cooptires.com *.projects.cooptires.com *.random.cooptires.com *.stage.cooptires.com *.uk.cooptires.com *.xxx.cooptires.com
*.achm.earnesthealth.com earnesthealth.com *.earnesthealth.com *.evrh.earnesthealth.com *.msh.earnesthealth.com *.mvrrh.earnesthealth.com *.random.earnesthealth.com
*.123.footrings.com *.classifieds.footrings.com *.controlpanel.footrings.com *.facebook.footrings.com *.feedback.footrings.com footrings.com *.footrings.com *.img.footrings.com *.members.footrings.com *.update.footrings.com *.users.footrings.com *.ww17.footrings.com *.zmml.footrings.com
footster.com *.footster.com *.random.footster.com
koleda365.org *.koleda365.org *.random.koleda365.org
ofccalculator.com *.ofccalculator.com *.ww38.ofccalculator.com
personalcaricature.com *.personalcaricature.com
*.random.rolex-malaysia.store rolex-malaysia.store *.rolex-malaysia.store
*.newsletter.royalschool.sk royalschool.sk *.royalschool.sk *.test.royalschool.sk
*.ftp.santander.pictures santander.pictures *.santander.pictures *.srv.santander.pictures *.webmail.santander.pictures *.ww25.santander.pictures
*.pipeline.smart-id.co *.random.smart-id.co smart-id.co *.smart-id.co
*.abilityadvantage.thejartford.com *.hostmaster.thejartford.com thejartford.com *.thejartford.com *.ww25.thejartford.com
*.ht.usdt365.org *.random.usdt365.org usdt365.org *.usdt365.org *.ww25.usdt365.org
xn--fhrerscheinklasse-22b.de *.xn--fhrerscheinklasse-22b.de