Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=smallwoodnews.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 03, 2026
Valid Until
September 01, 2026 76 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C3:17:A6:2E:B6:85:2C:59:8C:69:C4:DE:14:98:31:82:54:72:41:AF:9F:25:89:60:E1:D9:31:13:3E:F3:91:A5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
designbd.org *.designbd.org *.webmail.designbd.org

Other domains in certificate

*.a.baskent.info *.api.baskent.info baskent.info *.baskent.info *.etkinlik.baskent.info *.forum.baskent.info *.hostmaster.baskent.info *.rdp.baskent.info *.rds1.baskent.info *.remote.baskent.info *.secure.baskent.info *.staging.baskent.info *.vpn.baskent.info *.web.baskent.info *.yrqlxfub.baskent.info
bcsoft.cn *.bcsoft.cn *.email.bcsoft.cn *.help.bcsoft.cn *.mail.bcsoft.cn *.xbu.bcsoft.cn
clisksud.biz *.clisksud.biz *.ww16.clisksud.biz
*.cn.fenwei.com fenwei.com *.fenwei.com *.in.fenwei.com *.random.fenwei.com *.top.fenwei.com *.v2.fenwei.com *.ww16.fenwei.com
greenway.bio *.greenway.bio *.imap.greenway.bio *.mail.greenway.bio *.mx.greenway.bio
kankyo-saishinkai.com *.kankyo-saishinkai.com
ljlseo71.icu *.ljlseo71.icu
*.acheibarato.meuvendedor.online *.acheiumbarato.meuvendedor.online *.arrumadinhodaluciana.meuvendedor.online *.bi.meuvendedor.online *.development.meuvendedor.online *.estacaofria.meuvendedor.online *.kombicada.meuvendedor.online *.mail.meuvendedor.online meuvendedor.online *.meuvendedor.online *.paginadevendas.meuvendedor.online *.preprod.meuvendedor.online *.random.meuvendedor.online *.stopbeer.meuvendedor.online
*.app.mine566.com *.assets.mine566.com *.flash.mine566.com *.m.mine566.com *.members.mine566.com mine566.com *.mine566.com *.p.mine566.com *.v.mine566.com *.w.mine566.com
*.3s4953.paintloud.click paintloud.click *.paintloud.click
*.bmvibz.smallwoodnews.com *.fpxnew.smallwoodnews.com *.gcdnmz.smallwoodnews.com *.iomymx.smallwoodnews.com *.pbcc2w.smallwoodnews.com smallwoodnews.com *.smallwoodnews.com *.srpqhl.smallwoodnews.com *.vkuxy5.smallwoodnews.com *.zkqhf7.smallwoodnews.com
*.ebmail.soukdz.com soukdz.com *.soukdz.com
*.hko1b9.sv388sv-1o.vip sv388sv-1o.vip *.sv388sv-1o.vip
*.m.usaonlinenews.com usaonlinenews.com *.usaonlinenews.com