76/100 SECURITY SCORE

Certificate Information

Subject
CN=boostdigitalai.live
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 15, 2026
Valid Until
August 13, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
42:5C:5D:55:5D:EE:C2:D7:EE:FF:69:C6:8C:DB:44:58:19:3B:94:89:06:02:BB:72:22:08:D0:5F:70:4D:26:11
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
liquidsend.com *.liquidsend.com *.admin.liquidsend.com *.app.liquidsend.com *.dash.liquidsend.com *.dashboard.liquidsend.com *.demo.liquidsend.com *.dev.liquidsend.com *.tracking.liquidsend.com *.ww38.liquidsend.com

Other domains in certificate

2112kz.club *.2112kz.club *.df.2112kz.club *.dh.2112kz.club *.grxjddf.2112kz.club *.ww38.2112kz.club
acquaro.net *.acquaro.net *.mail.acquaro.net *.sanrocco.acquaro.net *.www.acquaro.net
*.8tyynx.boostdigitalai.live *.admin.boostdigitalai.live *.api.boostdigitalai.live *.app.boostdigitalai.live *.blog.boostdigitalai.live boostdigitalai.live *.boostdigitalai.live *.dashboard.boostdigitalai.live *.demo.boostdigitalai.live *.dev.boostdigitalai.live *.mail.boostdigitalai.live *.marketing.boostdigitalai.live *.portal.boostdigitalai.live *.shop.boostdigitalai.live *.staging.boostdigitalai.live *.stg.boostdigitalai.live *.uat.boostdigitalai.live *.v2.boostdigitalai.live *.web.boostdigitalai.live
*.11.tricity.net *.anyconnect.tricity.net *.app.tricity.net *.apps.tricity.net *.asa.tricity.net *.autoconfig.tricity.net *.autodiscover.tricity.net *.bbs.tricity.net *.cisco.tricity.net *.citrix.tricity.net *.clientesvpn.tricity.net *.cloud.tricity.net *.connect.tricity.net *.cpcontacts.tricity.net *.dev.tricity.net *.drvpn.tricity.net *.email.tricity.net *.ffffffffffff.tricity.net *.fortigate.tricity.net *.fortivpn.tricity.net *.forum.tricity.net *.ftp.tricity.net *.hostmaster.tricity.net *.links.tricity.net *.mail11.tricity.net *.mailhost.tricity.net *.mbox.tricity.net *.notexistsremote.tricity.net *.office.tricity.net *.owa.tricity.net *.post.tricity.net *.ra.tricity.net *.ravpn.tricity.net *.rdsmum.tricity.net *.rdweb.tricity.net *.relay1.tricity.net *.remoteapps.tricity.net *.smtp2.tricity.net *.smtpseguro.tricity.net *.ssl.tricity.net tricity.net *.tricity.net *.tsfweb.tricity.net *.vpn1.tricity.net *.vpn2.tricity.net *.vpnssl.tricity.net *.webmail.tricity.net *.webvpn.tricity.net *.www.tricity.net *.zimbra.tricity.net