75/100 SECURITY SCORE

Certificate Information

Subject
CN=pentesters.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026 46 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
46:5B:2A:D0:0A:FF:CA:86:8C:8C:9F:64:30:37:0C:61:06:0A:57:2F:89:3C:A5:8D:2C:65:E5:F6:B1:61:E8:EA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
pentesters.com.au *.pentesters.com.au *.sandbox.pentesters.com.au *.store.pentesters.com.au

Other domains in certificate

appterrier.com *.appterrier.com *.support.appterrier.com *.y1objr.appterrier.com
careersconnect-bridge.online *.careersconnect-bridge.online
*.admin.foland.com *.anyconnect.foland.com *.asa.foland.com *.autoconfig.foland.com *.ciscoasa.foland.com *.cloud.foland.com *.connect.foland.com *.cpcalendars.foland.com *.cpcontacts.foland.com *.dato.foland.com *.drvpn.foland.com *.email.foland.com *.exchange.foland.com foland.com *.foland.com *.ftp.foland.com *.gateway.foland.com *.m.foland.com *.office.foland.com *.portal.foland.com *.ptoav.foland.com *.ra.foland.com *.rds.foland.com *.remote.foland.com *.secure.foland.com *.ssl.foland.com *.sslvpn.foland.com *.store.foland.com *.webdisk.foland.com *.webvpn.foland.com *.wiki.foland.com
*.api.huanusco.com *.backup.huanusco.com *.crm.huanusco.com huanusco.com *.huanusco.com *.mail.huanusco.com *.pw1.huanusco.com *.ww1.huanusco.com *.ww11.huanusco.com *.ww16.huanusco.com *.ww5.huanusco.com
*.hostmaster.kablowy.com kablowy.com *.kablowy.com *.m.kablowy.com *.quiz.kablowy.com *.sitemap.kablowy.com *.sitemaps.kablowy.com *.ww1.kablowy.com *.ww16.kablowy.com *.ww17.kablowy.com *.ww25.kablowy.com *.ww5.kablowy.com
*.admin.livekamerat.com *.api.livekamerat.com *.app.livekamerat.com *.assets.livekamerat.com *.blog.livekamerat.com *.demo.livekamerat.com *.dev.livekamerat.com *.hostmaster.livekamerat.com livekamerat.com *.livekamerat.com *.m.livekamerat.com *.my.livekamerat.com *.ww1.livekamerat.com *.ww16.livekamerat.com *.ww17.livekamerat.com *.ww25.livekamerat.com *.ww38.livekamerat.com
*.app.members-dfysocial.com members-dfysocial.com *.members-dfysocial.com *.random.members-dfysocial.com
*.hostmaster.psychologylivelife.net *.mail.psychologylivelife.net psychologylivelife.net *.psychologylivelife.net