Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=mirinfusionkitchen.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 23, 2026
Valid Until
August 21, 2026 63 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
02:23:82:D2:E5:19:57:11:54:A2:5E:75:50:C8:19:6E:D5:EB:FA:26:FA:8A:10:4D:CF:3E:F8:A3:0C:63:9E:AD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
delineateapp.com *.delineateapp.com *.cdn.delineateapp.com *.mail.delineateapp.com *.track.delineateapp.com

Other domains in certificate

avbobo.vip *.avbobo.vip *.ww17.avbobo.vip *.www.avbobo.vip
bass-pedals.com *.bass-pedals.com *.random.bass-pedals.com *.sitemaps.bass-pedals.com
*.assets.blackwannabe.net blackwannabe.net *.blackwannabe.net *.dc-942a78f452d0.blackwannabe.net *.wildcard.blackwannabe.net *.ww1.blackwannabe.net *.ww25.blackwannabe.net *.ww38.blackwannabe.net
ciohotspot.net *.ciohotspot.net *.ww25.ciohotspot.net
*.blackboard.ebrschools.com ebrschools.com *.ebrschools.com *.esports.ebrschools.com *.members.ebrschools.com *.random.ebrschools.com *.ww38.ebrschools.com
goodewindnorden.de *.goodewindnorden.de
*.directory.memphisdirect.info memphisdirect.info *.memphisdirect.info
mirinfusionkitchen.com *.mirinfusionkitchen.com
oscil.lat *.oscil.lat
pentakits.co *.pentakits.co
rammohannaidu.com *.rammohannaidu.com
rkdwn1.org *.rkdwn1.org
savesmith.com *.savesmith.com
speakers-bass.sbs *.speakers-bass.sbs
*.a.sportekspres.ru *.age.sportekspres.ru *.api.sportekspres.ru *.app.sportekspres.ru *.cab.sportekspres.ru *.com.sportekspres.ru *.dashboard.sportekspres.ru *.dev.sportekspres.ru *.g.sportekspres.ru *.git.sportekspres.ru *.marketing.sportekspres.ru *.microsoft.sportekspres.ru *.mzhxjstage.sportekspres.ru *.ozwfevpy.sportekspres.ru *.pay.sportekspres.ru *.pop.sportekspres.ru *.secure.sportekspres.ru sportekspres.ru *.sportekspres.ru *.stage.sportekspres.ru *.superset.sportekspres.ru *.uperset.sportekspres.ru *.vhoibsecure.sportekspres.ru *.web.sportekspres.ru *.ww1.sportekspres.ru *.www.sportekspres.ru
suidian.net *.suidian.net
sxm73xxo6si0yn3.xyz *.sxm73xxo6si0yn3.xyz
tylerswindell.net *.tylerswindell.net
*.ci.vercomics.info vercomics.info *.vercomics.info
wcnjq53.buzz *.wcnjq53.buzz
yueliang97.buzz *.yueliang97.buzz