76/100 SECURITY SCORE

Certificate Information

Subject
CN=batmaniger.club
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 13, 2026
Valid Until
May 14, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C9:3E:B6:E1:BF:A2:EC:62:52:6C:A2:C6:97:21:D2:67:30:CE:97:19:10:22:DA:7E:4E:B7:96:DE:C0:EA:CF:68
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
lesgrands.com *.lesgrands.com *.backup.lesgrands.com *.dev.lesgrands.com *.mail.lesgrands.com *.test.lesgrands.com *.ww25.lesgrands.com

Other domains in certificate

archiwumtajemnic.eu *.archiwumtajemnic.eu
batmaniger.club *.batmaniger.club *.m.batmaniger.club *.mx02.batmaniger.club *.ww25.batmaniger.club *.ww38.batmaniger.club *.wwww.batmaniger.club
*.boycott.dhaka-it.com dhaka-it.com *.dhaka-it.com *.dhakait.dhaka-it.com *.eshop.dhaka-it.com *.wpshop.dhaka-it.com
elnuevonorte.com *.elnuevonorte.com *.wildcard.elnuevonorte.com *.ww25.elnuevonorte.com
*.ea.glendalerv.com glendalerv.com *.glendalerv.com *.soft.glendalerv.com *.ww1.glendalerv.com *.ww38.glendalerv.com
*.hostmaster.iuqq.com iuqq.com *.iuqq.com *.wiki.iuqq.com
*.crm.liaru.com *.dev.liaru.com *.imap.liaru.com liaru.com *.liaru.com *.test.liaru.com *.ww1.liaru.com *.ww11.liaru.com *.ww16.liaru.com *.ww25.liaru.com
*.13775.mediawire.me *.2.mediawire.me *.2423.mediawire.me *.349286.mediawire.me *.4.mediawire.me *.548539.mediawire.me *.73473.mediawire.me *.8.mediawire.me *.djmnxu1499.mediawire.me *.dos34a.mediawire.me *.g.mediawire.me *.idb.mediawire.me *.km59.mediawire.me *.kycz.mediawire.me mediawire.me *.mediawire.me *.s.mediawire.me *.slgtun.mediawire.me *.ty5539.mediawire.me *.ulrfkp.mediawire.me *.v.mediawire.me *.x4242.mediawire.me *.ye.mediawire.me *.zflpop.mediawire.me
*.api.pulsediet.com *.backup.pulsediet.com *.dev.pulsediet.com *.mail.pulsediet.com pulsediet.com *.pulsediet.com *.sitemaps.pulsediet.com *.test.pulsediet.com *.vpn.pulsediet.com *.ww16.pulsediet.com *.ww38.pulsediet.com
*.images.technobase.eu technobase.eu *.technobase.eu
*.servidorunivoz.univoz.com univoz.com *.univoz.com *.ww11.univoz.com *.ww25.univoz.com *.ww38.univoz.com