SSL Certificate Analysis for dan.lifemount.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=lifemount.com

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

May 18, 2026

Valid Until

August 16, 2026 88 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

8A:8E:AA:27:E0:1B:47:7B:E1:AE:D0:D8:88:58:E2:C5:65:17:CB:F8:9C:D0:19:D4:D3:33:26:46:38:24:2E:4D

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

lifemount.com *.lifemount.com *.dan.lifemount.com *.hostmaster.lifemount.com *.ww38.lifemount.com

Other domains in certificate

*.8joac.9x1z1c.top 9x1z1c.top *.9x1z1c.top *.ques8.9x1z1c.top *.y6iui.9x1z1c.top

*.0mc971.apikeckotabondowoso.org apikeckotabondowoso.org *.apikeckotabondowoso.org

*.0g84nmqrmm.haerbin01.cn *.4d31d8wz33g1r5z.haerbin01.cn *.acipngfc4x.haerbin01.cn haerbin01.cn *.haerbin01.cn *.iw998wdypv.haerbin01.cn *.mf2m3849x1qsn8a.haerbin01.cn *.www.haerbin01.cn

*.admin.odysseylive.net *.agaw-agimat.odysseylive.net *.airport-dram.odysseylive.net *.angulo.odysseylive.net *.astrojuan.odysseylive.net *.autoconfig.odysseylive.net *.autodiscover.odysseylive.net *.blog.odysseylive.net *.chillitees.odysseylive.net *.corp.odysseylive.net *.cpcontacts.odysseylive.net *.ftp.odysseylive.net *.gunjam.odysseylive.net *.hardboiled.odysseylive.net *.host.odysseylive.net *.mx.odysseylive.net *.ns2.odysseylive.net odysseylive.net *.odysseylive.net *.owa.odysseylive.net *.preprod.odysseylive.net *.radionova.odysseylive.net *.rds.odysseylive.net *.rdweb.odysseylive.net *.remote.odysseylive.net *.rigmarole.odysseylive.net *.roy-salud.odysseylive.net *.shop.odysseylive.net *.sitemap.odysseylive.net *.social.odysseylive.net *.spacecoaster.odysseylive.net *.sslvpn.odysseylive.net *.swing-agenda.odysseylive.net *.vpn3.odysseylive.net *.waway.odysseylive.net *.ww17.odysseylive.net *.youmash.odysseylive.net

prosvarky.info *.prosvarky.info *.ww38.prosvarky.info