Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=charliedonovan.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 02, 2026
Valid Until
July 01, 2026 44 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B8:96:D7:75:A8:0F:BA:6B:43:61:A4:2A:11:60:BC:8E:BF:C8:33:7D:B3:05:02:D5:75:2D:9D:A8:55:EA:3D:01
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
desclub.com *.desclub.com *.rubri.desclub.com

Other domains in certificate

*.anyconnect.bevillcntr.org *.assets.bevillcntr.org *.autodiscover.bevillcntr.org bevillcntr.org *.bevillcntr.org *.docs.bevillcntr.org *.email.bevillcntr.org *.external.bevillcntr.org *.f378be5b-1070-4f9d-8e8c-5aa8fa11f681.bevillcntr.org *.fw.bevillcntr.org *.gad.bevillcntr.org *.intranet.bevillcntr.org *.login.bevillcntr.org *.netacad.bevillcntr.org *.panvpn.bevillcntr.org *.portal.bevillcntr.org *.public.bevillcntr.org *.share.bevillcntr.org *.sharepoint.bevillcntr.org *.tbcintersrv.bevillcntr.org *.test.bevillcntr.org *.webmail.bevillcntr.org
charliedonovan.com *.charliedonovan.com *.hostmaster.charliedonovan.com *.portal.charliedonovan.com *.shop.charliedonovan.com *.www.charliedonovan.com
collegecredit.org *.collegecredit.org *.www.collegecredit.org
dystonia-bb.org *.dystonia-bb.org *.efe48af2-473b-4def-bbf0-abf56771c7a1.dystonia-bb.org *.test.dystonia-bb.org
easyelearning.it *.easyelearning.it *.reports.easyelearning.it *.staging.easyelearning.it
girlchat.it *.girlchat.it *.supersets.girlchat.it
*.81304d50-0020-4826-be2e-1c516862889a.questdiagnkstics.com *.8c42a91a-1a4b-4872-a7d2-5dcacf611daa.questdiagnkstics.com *.accounts.questdiagnkstics.com *.admin.questdiagnkstics.com *.alpointment.questdiagnkstics.com *.analytic.questdiagnkstics.com *.app.questdiagnkstics.com *.argo.questdiagnkstics.com *.backend.questdiagnkstics.com *.careers.questdiagnkstics.com *.chart.questdiagnkstics.com *.dashboard.questdiagnkstics.com *.dashboards.questdiagnkstics.com *.demo.questdiagnkstics.com *.development.questdiagnkstics.com *.home.questdiagnkstics.com *.hostmaster.questdiagnkstics.com *.intranet.questdiagnkstics.com *.login.questdiagnkstics.com *.loja.questdiagnkstics.com *.m.questdiagnkstics.com *.myquest.questdiagnkstics.com *.notexistsmyquest.questdiagnkstics.com *.nsvhpvpnssl.questdiagnkstics.com questdiagnkstics.com *.questdiagnkstics.com *.remote.questdiagnkstics.com *.reporting.questdiagnkstics.com *.reports.questdiagnkstics.com *.shop.questdiagnkstics.com *.staging.questdiagnkstics.com *.store.questdiagnkstics.com *.superset.questdiagnkstics.com *.vpn.questdiagnkstics.com *.vpnssl.questdiagnkstics.com *.wew.questdiagnkstics.com *.workflow.questdiagnkstics.com *.www.questdiagnkstics.com
*.direct.transusnion.com *.random.transusnion.com transusnion.com *.transusnion.com *.ww17.transusnion.com *.ww25.transusnion.com