75/100 SECURITY SCORE

Certificate Information

Subject
CN=townsvillemotels.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 28, 2026
Valid Until
December 27, 2026 66 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A3:03:2F:9E:17:67:02:5B:6F:FD:2B:D4:46:3E:4A:3B:7B:61:97:13:AE:01:96:D8:B7:9A:31:F8:84:06:F2:A0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
longitude.com.au *.longitude.com.au *.277e9ddc-cf52-45c2-822d-db8448a9d68c.longitude.com.au *.comune.longitude.com.au *.mail.longitude.com.au *.new.longitude.com.au

Other domains in certificate

8mbets.us.com *.8mbets.us.com
bosscap.com.au *.bosscap.com.au *.matrix.bosscap.com.au *.quotient.bosscap.com.au
c6banck.com.br *.c6banck.com.br *.cemprestimo.c6banck.com.br *.empreatimo.c6banck.com.br *.emprestico.c6banck.com.br *.emprestimo.c6banck.com.br *.empretimo.c6banck.com.br *.espestimo.c6banck.com.br *.imprestimo.c6banck.com.br *.login-homebroker.c6banck.com.br *.portalcliente.c6banck.com.br *.ww25.c6banck.com.br
*.admin.cittauniversitarie.it *.api.cittauniversitarie.it *.app.cittauniversitarie.it *.backend.cittauniversitarie.it cittauniversitarie.it *.cittauniversitarie.it *.demo.cittauniversitarie.it *.reports.cittauniversitarie.it *.superset.cittauniversitarie.it *.supersets.cittauniversitarie.it
dickjohnsonracing.au *.dickjohnsonracing.au *.r1.dickjohnsonracing.au *.ww25.dickjohnsonracing.au
*.admin.dorcel.it *.api.dorcel.it *.app.dorcel.it *.backend.dorcel.it *.bi.dorcel.it *.data.dorcel.it *.demo.dorcel.it dorcel.it *.dorcel.it *.flowise.dorcel.it *.owa.dorcel.it *.reporting.dorcel.it *.staging.dorcel.it *.superset.dorcel.it
gratefulpalateimports.com *.gratefulpalateimports.com
hattrickfc.com *.hattrickfc.com *.ww38.hattrickfc.com
jwm-j-kjqzplg.top *.jwm-j-kjqzplg.top
*.access.offshoring.com.au *.blog.offshoring.com.au *.mailserver.offshoring.com.au *.new.offshoring.com.au offshoring.com.au *.offshoring.com.au *.ww25.offshoring.com.au
*.admin.sephoras.us sephoras.us *.sephoras.us *.ww38.sephoras.us
*.online.slots-casino-online.com slots-casino-online.com *.slots-casino-online.com
*.gitlab.townsvillemotels.com.au *.llm.townsvillemotels.com.au townsvillemotels.com.au *.townsvillemotels.com.au
*.llm.trafficsign.com.au *.random.trafficsign.com.au trafficsign.com.au *.trafficsign.com.au
*.llm.transponders.com.au transponders.com.au *.transponders.com.au
*.llm.tvaustralia.com.au tvaustralia.com.au *.tvaustralia.com.au
uncutmaza.shop *.uncutmaza.shop *.www.uncutmaza.shop