76/100 SECURITY SCORE

Certificate Information

Subject
CN=cairaman.click
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 21, 2026
Valid Until
August 19, 2026 69 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
ED:32:EC:56:8A:52:7F:7D:19:F5:62:05:F1:A9:63:60:27:8F:DA:94:55:17:76:C1:AB:BE:D8:77:B1:28:45:AA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
earningtips.co *.earningtips.co *.com.earningtips.co *.uk.earningtips.co

Other domains in certificate

altering.it *.altering.it *.remote.altering.it *.scola.altering.it
baohtr.space *.baohtr.space *.ww25.baohtr.space
cairaman.click *.cairaman.click *.ww25.cairaman.click *.ww38.cairaman.click
clipshot.co *.clipshot.co *.ww38.clipshot.co
homeauditor.com *.homeauditor.com *.mail.homeauditor.com
phantomwebtest.com *.phantomwebtest.com
*.12p742.promotesocially.com *.164c5366-0133-4e44-9daa-1bfafe68f170.promotesocially.com *.access.promotesocially.com *.adm.promotesocially.com *.admin.promotesocially.com *.af1a6533-114a-4091-9740-0bee050d17d1.promotesocially.com *.api.promotesocially.com *.app.promotesocially.com *.apps.promotesocially.com *.assets.promotesocially.com *.autoconfig.promotesocially.com *.autodiscover.promotesocially.com *.backup.promotesocially.com *.blog.promotesocially.com *.cloud.promotesocially.com *.cpanel.promotesocially.com *.cpcalendars.promotesocially.com *.cpcontacts.promotesocially.com *.dashboard.promotesocially.com *.demo.promotesocially.com *.dev.promotesocially.com *.ef1f31c7-6eb4-4754-9a49-598d4dd39499.promotesocially.com *.etiddvpn1.promotesocially.com *.ftp.promotesocially.com *.gateway.promotesocially.com *.mail.promotesocially.com *.marketing.promotesocially.com *.portal.promotesocially.com promotesocially.com *.promotesocially.com *.qa.promotesocially.com *.rds.promotesocially.com *.rds1.promotesocially.com *.rdweb.promotesocially.com *.remote.promotesocially.com *.secure.promotesocially.com *.sitemap.promotesocially.com *.stg.promotesocially.com *.test.promotesocially.com *.traefik.promotesocially.com *.ts.promotesocially.com *.v1.promotesocially.com *.vpn.promotesocially.com *.webdisk.promotesocially.com *.whm.promotesocially.com *.ww6.promotesocially.com *.yfvrkbackup.promotesocially.com
regpackrank.com *.regpackrank.com
setle.sbs *.setle.sbs
spokekijw.world *.spokekijw.world
swixsporth.shop *.swixsporth.shop
tailactivewearr.shop *.tailactivewearr.shop
*.2470d181-b935-42cb-9cb8-d7751b30eff2.tastings.live *.a16decf9-3a85-4e55-afc7-0c2f8e650a26.tastings.live *.api.tastings.live *.app.tastings.live *.demo.tastings.live *.hostmaster.tastings.live tastings.live *.tastings.live *.wildcard.tastings.live *.www.tastings.live