Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=peardecl.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 25, 2025
Valid Until
March 25, 2026
31 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BD:C4:B5:99:AD:C2:8E:1F:B5:AA:92:E2:14:BF:B0:30:FE:BA:BE:05:3D:8F:90:0E:1C:20:EA:3F:ED:A4:13:7A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
relly.net
*.relly.net
*.ak.relly.net
*.alime.relly.net
*.ba.relly.net
*.bade.relly.net
*.bejakn.relly.net
*.bi.relly.net
*.bisi.relly.net
*.caket.relly.net
*.cc.relly.net
*.ceker.relly.net
*.cf.relly.net
*.click.relly.net
*.com.relly.net
*.cyou.relly.net
*.durna.relly.net
*.google.relly.net
*.id.relly.net
*.idshop.relly.net
*.invalid.relly.net
*.it.relly.net
*.kdin.relly.net
*.kdng.relly.net
*.ki.relly.net
*.kieuw.relly.net
*.la.relly.net
*.mah.relly.net
*.maksu.relly.net
*.me.relly.net
*.moal.relly.net
*.na.relly.net
*.nah.relly.net
*.ncep.relly.net
*.neaanga.relly.net
*.net.relly.net
*.ngi.relly.net
*.online.relly.net
*.puguh.relly.net
*.rest.relly.net
*.sa.relly.net
*.sgn.relly.net
*.snen.relly.net
*.store.relly.net
*.te.relly.net
*.teh.relly.net
*.th.relly.net
*.tr.relly.net
*.ujh.relly.net
*.undefined.relly.net
*.ww25.relly.net
03members.club
*.03members.club
*.ww38.03members.club
cambaddies.co
*.cambaddies.co
*.go.cambaddies.co
*.xh.cambaddies.co
*.zh.cambaddies.co
fitirl-repack.site
*.fitirl-repack.site
*.ww38.fitirl-repack.site
*.admin.peardecl.com
*.app.peardecl.com
peardecl.com
*.peardecl.com
*.www.peardecl.com
*.r5.rfm.de
rfm.de
*.rfm.de
*.12.rsg385.top
*.18.rsg385.top
*.22.rsg385.top
*.3.rsg385.top
*.31.rsg385.top
*.37.rsg385.top
*.447.rsg385.top
*.54.rsg385.top
*.64.rsg385.top
*.695.rsg385.top
*.73.rsg385.top
*.75.rsg385.top
*.97.rsg385.top
*.d20.rsg385.top
*.d35.rsg385.top
*.g64.rsg385.top
*.k86.rsg385.top
rsg385.top
*.rsg385.top
Other domains in certificate