Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=frkhanacademy.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 10, 2026
Valid Until
May 11, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F9:26:47:D3:26:76:9A:D1:85:CF:E0:43:BE:6E:F8:61:01:3E:80:55:58:CC:91:AD:94:A8:F2:20:E7:A1:7A:BE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
cursooficial.com
*.cursooficial.com
*.centrorisorse.cursooficial.com
*.com.cursooficial.com
*.corespeitoalpha.cursooficial.com
*.cpanel.cursooficial.com
*.decoracaodecasamentosimples.cursooficial.com
*.importadorprofissionalcurso.cursooficial.com
*.importandocomsucesso.cursooficial.com
*.quedadecabelotratamento.cursooficial.com
*.respeitoalpha.cursooficial.com
*.saveindustrialbrooklyn.cursooficial.com
*.tesourodiretooficial.cursooficial.com
*.thenewinnroughton.cursooficial.com
*.www.cursooficial.com
avtubofficial.me
*.avtubofficial.me
*.cpanel.avtubofficial.me
datasponsors.com
*.datasponsors.com
*.intranet.datasponsors.com
*.vpn.datasponsors.com
*.es.frkhanacademy.org
frkhanacademy.org
*.frkhanacademy.org
*.staging.frkhanacademy.org
*.testing.frkhanacademy.org
*.anyconnect.jagadhri.com
*.cisapp.jagadhri.com
*.citrix.jagadhri.com
*.clientesvpn.jagadhri.com
*.connect.jagadhri.com
*.gateway.jagadhri.com
jagadhri.com
*.jagadhri.com
*.mail.jagadhri.com
*.palovpn.jagadhri.com
*.ra.jagadhri.com
*.rds.jagadhri.com
*.sslvpn.jagadhri.com
*.vdi.jagadhri.com
*.vpn.jagadhri.com
*.vpngate.jagadhri.com
*.webmail.jagadhri.com
*.webvpn.jagadhri.com
*.wiki.jagadhri.com
*.ww1.jagadhri.com
*.ww11.jagadhri.com
*.xapp.jagadhri.com
mitanio.com
*.mitanio.com
*.ww25.mitanio.com
*.correo.myrie.com
*.exchange.myrie.com
*.mail.myrie.com
*.mail3.myrie.com
*.mymail.myrie.com
myrie.com
*.myrie.com
*.outlook.myrie.com
*.owa.myrie.com
*.rds.myrie.com
*.remote.myrie.com
*.sitemaps.myrie.com
*.vpn.myrie.com
*.webmail.myrie.com
*.ww25.myrie.com
*.ww38.myrie.com
*.mail.sntrustcentralschool.com
sntrustcentralschool.com
*.sntrustcentralschool.com
*.ww38.sntrustcentralschool.com
*.1.thomsongrassvalley.com
*.app.thomsongrassvalley.com
*.collaborate.thomsongrassvalley.com
*.desktop.thomsongrassvalley.com
*.desktopadmin.thomsongrassvalley.com
*.ftp.thomsongrassvalley.com
*.hdsportsproduction.thomsongrassvalley.com
*.search2.thomsongrassvalley.com
*.secure.thomsongrassvalley.com
thomsongrassvalley.com
*.thomsongrassvalley.com
*.ww.thomsongrassvalley.com
*.ww17.thomsongrassvalley.com
*.www2.thomsongrassvalley.com
*.xcx.thomsongrassvalley.com
*.www.yfp.us
yfp.us
*.yfp.us
Other domains in certificate