76/100 SECURITY SCORE

Certificate Information

Subject
CN=amexgifftcard.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 27, 2026
Valid Until
July 26, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CA:A8:43:22:C8:54:68:93:FA:DA:E0:1D:02:54:72:3E:B0:2A:91:62:27:60:F0:E1:42:45:19:A4:1B:46:64:BF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
aventuraspraytan.com *.aventuraspraytan.com *.dev.aventuraspraytan.com *.maps.aventuraspraytan.com *.staging.aventuraspraytan.com

Other domains in certificate

13cabsonline.au *.13cabsonline.au *.ww16.13cabsonline.au *.ww25.13cabsonline.au
accuqote.com *.accuqote.com
acdown.com *.acdown.com
airvinnitsa.com *.airvinnitsa.com *.ww25.airvinnitsa.com *.www.airvinnitsa.com
amazonpin.com *.amazonpin.com *.random.amazonpin.com *.ww25.amazonpin.com
*.092fe225-a7cb-4849-a05c-4f1b13d2d344.amexgifftcard.com *.32.amexgifftcard.com *.alfa.amexgifftcard.com amexgifftcard.com *.amexgifftcard.com *.ci.amexgifftcard.com *.cpanel.amexgifftcard.com *.ww25.amexgifftcard.com *.ww38.amexgifftcard.com
ascotvale.au *.ascotvale.au
balancedbusiness.co.uk *.balancedbusiness.co.uk
berkeleyheights.com *.berkeleyheights.com
daytrading4profit.com *.daytrading4profit.com
dentalbraces.com.au *.dentalbraces.com.au *.random.dentalbraces.com.au *.ww38.dentalbraces.com.au *.www.dentalbraces.com.au
drivingburntwood.co.uk *.drivingburntwood.co.uk
eesurance.com *.eesurance.com
*.cicd.jjwasabis.com jjwasabis.com *.jjwasabis.com *.sitemaps.jjwasabis.com
josephslate.com *.josephslate.com
metalparts.com *.metalparts.com
osterclippers.com *.osterclippers.com
overway.com *.overway.com
*.cart.patrick-mohr.com *.mail.patrick-mohr.com patrick-mohr.com *.patrick-mohr.com *.ww16.patrick-mohr.com *.ww25.patrick-mohr.com *.ww38.patrick-mohr.com *.www.patrick-mohr.com
raumpenthouse.com *.raumpenthouse.com *.ww25.raumpenthouse.com
sapinsbarbus.com *.sapinsbarbus.com *.shop.sapinsbarbus.com *.ww38.sapinsbarbus.com
smiffys.au *.smiffys.au *.ww38.smiffys.au
*.a.speedtestfrontier.com speedtestfrontier.com *.speedtestfrontier.com *.store.speedtestfrontier.com *.wordpress.speedtestfrontier.com *.ww25.speedtestfrontier.com
vonbotique.com *.vonbotique.com *.ww25.vonbotique.com
wetzar.de *.wetzar.de
wmd.au *.wmd.au