Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=manu.votebase.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
November 24, 2025
Valid Until
February 22, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
84:86:87:72:DD:08:C5:C7:DB:E1:35:72:FA:82:82:99:85:41:FC:01:71:39:18:D4:2A:5C:B8:01:C4:BF:14:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
dbit.com.pl
2020.systems
www.7chat.live
airbnb.rio
alex-wendler.de
www.andrejus.uk
www.aquavolt.net
app.ascc.me
www.ashwinkumars.com
www.banazak.io
c2.bedesi.dev
sakshi.bedesi.dev
app-staging.bushidoco.de
capscale.com
gemini.castoredc.org
app.cemento.ai
googleblockbreaker.classroom6x.org
judies.opendream.co.th
authentication.floweradvisor.com.sg
dietgenie.app
chat.digitalclub.online
xn--operatr-v1a.entur.org
eurofloor.lt
www.eurofloor.lt
findmydrift.com
whereiskidsuper.foda.farm
auth.hottub.fractal.is
www.fuentram.org
www.admin.gargya.in
had-apps.com
healthbridgefoundation.org
dashboard.maka-bane.huygens.io
www.incubakor.org
passport.instant.im
jamieclerk.ai
jatosuporte.com.br
jjfloris.id
todo.kaiprince.xyz
auth.karaokemassacre.dev
kingiftcard.com
linuxisfreak.in
medtrackmedical.in
www.mereo.tech
mitset.tech
mosqto2001.com
myscreenon.work
auth.naijaworld.online
app.controle-eventos.nawebb.com
app.staging.orlikfy.pl
auth.planned.com
postclowns.com
xn--porednictwo-ffc.pracy.org
onetmc.qzz.io
www.selvabankers.in
simplicatedgames.com
minigolf.soturimedia.in
admin.speedzy.shop
resto.speedzy.shop
www.sutaung.bar
swan-frere.fr
teachathomeio.com
www.tekpartner.net
www.telementry.com
www.the3djewel.com
www.thingsijustmadeup.com
app.tickethub.com.br
todly.in
order.traitte.store
www.order.traitte.store
team.tutoruu.com
www.vartis.lt
manu.votebase.com
yosemitehotels.vouchercart.com
wackywarlords.com
watawalatea.lk
fines.woodynet.co
www.xn--7bi.je
xn--gmq850d3gz.com
admin.dev.xn--hier-jra.com
translator.dev.xn--hier-jra.com
r.xn--legislaie-wmd.ro
www.xn--lisadzulham-k976j.ws
xn--lisadzulham-k976j.ws
xn--meistermssenaufsteigen-zlc.de
www.xn--mingenoptrning-9ib.dk
www.xn--mw-xkab.de
xn--mw-xkab.de
www.xn--nettipyr-7za2p.com
www.xn--o3cc6cxbc.com
www.xn--penkilde-8za.org
www.xn--pskejakten-15a.no
xn--strbr-jraf.com
xn--szkoawzasigu-ewb18c.pl
xn--waschhaus-rgen-qsb.de
xn--y8j7b5cn1g837thhi08gz93h.com
yapily.com
red.ynriver.com
cv.yosiftware.es
dia.yosiftware.es
links.yourgolftravel.com
Other domains in certificate