Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=glimmerwood.digital
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 23, 2026
Valid Until
September 21, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
51:D7:2B:D4:AB:10:D4:41:C5:A8:3D:2D:3D:4A:B4:49:88:9E:6C:9E:8F:09:48:81:E7:E0:25:EF:36:26:70:84
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
cyue22.com *.cyue22.com

Other domains in certificate

101xyz.xyz *.101xyz.xyz *.com.101xyz.xyz
*.bdx5b2.bibotin.shop bibotin.shop *.bibotin.shop *.cpcontacts.bibotin.shop *.members.bibotin.shop *.painel.bibotin.shop *.sitemap.bibotin.shop *.webdisk.bibotin.shop *.webmail.bibotin.shop
bytesandnibbles.com *.bytesandnibbles.com *.org.bytesandnibbles.com
*.authsmtp.cincinnattibell.com cincinnattibell.com *.cincinnattibell.com *.home.cincinnattibell.com *.mail.cincinnattibell.com *.owa.cincinnattibell.com *.secure.cincinnattibell.com *.ssl.cincinnattibell.com *.webmail.cincinnattibell.com *.ww16.cincinnattibell.com *.ww17.cincinnattibell.com *.ww2.cincinnattibell.com *.ww35.cincinnattibell.com *.ww38.cincinnattibell.com
clearchoicefinance.live *.clearchoicefinance.live
*.api.comixdream.com comixdream.com *.comixdream.com *.demo.comixdream.com *.shop.comixdream.com
courteousvacations.live *.courteousvacations.live
creatum.xyz *.creatum.xyz
cs556.com *.cs556.com *.ebay.cs556.com
frsrobotics.com *.frsrobotics.com *.mail.frsrobotics.com *.new.frsrobotics.com *.sip.frsrobotics.com
*.admin.glimmerwood.digital *.api.glimmerwood.digital *.app.glimmerwood.digital *.blog.glimmerwood.digital *.cual2o.glimmerwood.digital *.demo.glimmerwood.digital glimmerwood.digital *.glimmerwood.digital
gottagetgames.com *.gottagetgames.com *.lms.gottagetgames.com *.magento.gottagetgames.com *.pay.gottagetgames.com *.preprod.gottagetgames.com *.webmail.gottagetgames.com
*.ch50lr.me8b8.mom me8b8.mom *.me8b8.mom
otterm8.com *.otterm8.com *.rcuwpo53.otterm8.com
*.eye.s2700.com *.m.s2700.com s2700.com *.s2700.com
*.app.soulmatrixr.com *.demo.soulmatrixr.com *.dev.soulmatrixr.com soulmatrixr.com *.soulmatrixr.com *.test.soulmatrixr.com
worldecho.online *.worldecho.online *.ww25.worldecho.online
*.admin.youssl.pro *.mrylfwap.youssl.pro *.webmail.youssl.pro youssl.pro *.youssl.pro