75/100 SECURITY SCORE

Certificate Information

Subject
CN=varyapmeridian.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 15, 2026
Valid Until
December 14, 2026 66 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
76:1B:D0:28:FF:F4:AF:FE:0A:C5:30:05:AB:58:80:F8:C7:A9:21:01:78:2C:79:A5:9D:24:F1:DB:BD:64:C2:79
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
adreader.com *.adreader.com *.admin.adreader.com *.analyze.adreader.com *.argo.adreader.com *.bigdata.adreader.com *.chart.adreader.com *.data.adreader.com *.demo.adreader.com *.intel.adreader.com *.miaozhua.adreader.com *.stats.adreader.com *.supersets.adreader.com *.users.adreader.com *.visual.adreader.com *.workflow.adreader.com *.yueyou.adreader.com

Other domains in certificate

88winner.vip *.88winner.vip *.account.88winner.vip *.api.88winner.vip *.app.88winner.vip *.backend.88winner.vip *.beta.88winner.vip *.blog.88winner.vip *.cms.88winner.vip *.secure.88winner.vip *.sitemaps.88winner.vip *.staging.88winner.vip *.stg.88winner.vip *.v1.88winner.vip *.v2.88winner.vip
centrahealthplan.com *.centrahealthplan.com *.dev.centrahealthplan.com *.wildcard.centrahealthplan.com *.ww38.centrahealthplan.com
*.antarjal.ctfbd.io ctfbd.io *.ctfbd.io *.flaghunt.ctfbd.io
dghanjing.cn *.dghanjing.cn *.fcl4l1xsz0.dghanjing.cn
*.crm.epslot789.bio *.dev.epslot789.bio epslot789.bio *.epslot789.bio *.play.epslot789.bio *.staging-login.epslot789.bio *.staging.epslot789.bio
hitmuzon.pro *.hitmuzon.pro *.red.hitmuzon.pro *.wildcard.hitmuzon.pro
*.admin.neweggs.ca *.app.neweggs.ca *.atlas.neweggs.ca *.cloud.neweggs.ca *.demo.neweggs.ca *.dr.neweggs.ca *.mail.neweggs.ca neweggs.ca *.neweggs.ca *.portal.neweggs.ca *.realm-qa.neweggs.ca *.www.neweggs.ca
*.hostmaster.oxying.com oxying.com *.oxying.com *.wwww.oxying.com
*.cms.sikat88-duir.click sikat88-duir.click *.sikat88-duir.click
*.cat.varyapmeridian.com *.com.varyapmeridian.com *.dom.varyapmeridian.com *.flowiseai.varyapmeridian.com *.sms.varyapmeridian.com *.test.varyapmeridian.com *.users.varyapmeridian.com varyapmeridian.com *.varyapmeridian.com *.ww16.varyapmeridian.com *.ww38.varyapmeridian.com
*.apps.yachtcost.homes yachtcost.homes *.yachtcost.homes