Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=restsis.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 25, 2026
Valid Until
December 24, 2026 73 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
2D:09:80:C1:75:45:64:CD:A8:44:83:93:01:47:DC:52:F7:D4:96:72:FA:8D:09:E0:04:31:24:C1:CE:D6:96:A7
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
prize.com.au *.prize.com.au *.cms.prize.com.au *.crm.prize.com.au *.insights.prize.com.au *.major.prize.com.au *.staging.prize.com.au *.ww38.prize.com.au

Other domains in certificate

*.2080-www.mercato.com.br *.eml.mercato.com.br *.gran.mercato.com.br *.insight-hotfix.mercato.com.br *.internet.mercato.com.br mercato.com.br *.mercato.com.br *.superset.mercato.com.br *.ww25.mercato.com.br
*.autodiscover.novinhanua.com.br *.cpcalendars.novinhanua.com.br *.cpcontacts.novinhanua.com.br *.dc-fc677ac3d3c3.novinhanua.com.br *.insight.novinhanua.com.br novinhanua.com.br *.novinhanua.com.br *.random.novinhanua.com.br *.ww16.novinhanua.com.br *.ww25.novinhanua.com.br
*.hostmaster.paycor.cm *.insight-sandbox.paycor.cm paycor.cm *.paycor.cm *.secure.paycor.cm *.ww38.paycor.cm
*.comune.poppa.com.au *.insight.poppa.com.au poppa.com.au *.poppa.com.au
*.com.pus.com.au *.insight.pus.com.au pus.com.au *.pus.com.au *.ww25.pus.com.au
*.chat.quickit.com.au *.demo.quickit.com.au *.dev.quickit.com.au *.insight.quickit.com.au quickit.com.au *.quickit.com.au *.random.quickit.com.au *.report.quickit.com.au *.ww38.quickit.com.au
*.api.rangenepal.com rangenepal.com *.rangenepal.com
*.insight.ravioli.com.au ravioli.com.au *.ravioli.com.au
*.backend.reclaimed-wood.com *.news.reclaimed-wood.com *.rd.reclaimed-wood.com reclaimed-wood.com *.reclaimed-wood.com *.vpn2.reclaimed-wood.com *.web.reclaimed-wood.com
*.data.repeat.com.au *.insights.repeat.com.au repeat.com.au *.repeat.com.au *.wildcard.repeat.com.au *.ww25.repeat.com.au
*.insight.rescues.com.au rescues.com.au *.rescues.com.au *.ww25.rescues.com.au
*.arrowenergy.reservoir.com.au *.hunterwater.reservoir.com.au *.insight-hotfix.reservoir.com.au reservoir.com.au *.reservoir.com.au *.ww38.reservoir.com.au
restsis.com *.restsis.com *.staging.restsis.com *.ww12.restsis.com
*.insight.retrench.com.au retrench.com.au *.retrench.com.au
*.insight.shrub.com.au shrub.com.au *.shrub.com.au