75/100 SECURITY SCORE

Certificate Information

Subject
CN=34.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 28, 2026
Valid Until
December 27, 2026 50 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
D0:99:9C:47:69:32:89:8E:AF:45:B9:6C:2C:50:BE:61:D9:19:6F:4B:24:AF:77:D5:05:73:D8:49:69:1B:98:54
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
pixelcraft.com.au *.pixelcraft.com.au *.demo.pixelcraft.com.au *.dev.pixelcraft.com.au *.sms.pixelcraft.com.au *.store.pixelcraft.com.au *.ww38.pixelcraft.com.au

Other domains in certificate

*.109.34.com.au *.120.34.com.au *.156.34.com.au *.16.34.com.au *.189.34.com.au *.210.34.com.au 34.com.au *.34.com.au *.50.34.com.au *.61.34.com.au *.comune.34.com.au *.lax0.34.com.au *.mail.34.com.au *.monitor.34.com.au *.random.34.com.au *.smbrez.34.com.au *.supportteamwestpac.34.com.au *.td.34.com.au *.test7.34.com.au *.ww38.34.com.au
*.ffffffffffff.indooroopilly.com.au indooroopilly.com.au *.indooroopilly.com.au *.journey.indooroopilly.com.au *.parkcharge.indooroopilly.com.au *.smkxxy.indooroopilly.com.au
*.citrix.killswitch.com.au *.comune.killswitch.com.au *.demo.killswitch.com.au *.dev.killswitch.com.au killswitch.com.au *.killswitch.com.au *.mail.killswitch.com.au *.mx01.killswitch.com.au *.preview.killswitch.com.au *.sitemaps.killswitch.com.au *.smtp-in.killswitch.com.au *.ww25.killswitch.com.au
*.apps.pattersongrouplaw.com pattersongrouplaw.com *.pattersongrouplaw.com
privatemortgages.com.au *.privatemortgages.com.au *.smtp-in.privatemortgages.com.au
*.2024.reslestate.com.au *.dan.reslestate.com.au *.help.reslestate.com.au *.random.reslestate.com.au reslestate.com.au *.reslestate.com.au *.sms.reslestate.com.au
*.20eeed78-2120-4033-959d-2e6555bd91c9.thequadrant.com.au *.25.thequadrant.com.au *.api.thequadrant.com.au *.autoconfig.thequadrant.com.au *.autodiscover.thequadrant.com.au *.cpanel.thequadrant.com.au *.dev.thequadrant.com.au *.ftp.thequadrant.com.au *.mail.thequadrant.com.au *.sitemap.thequadrant.com.au *.sitemaps.thequadrant.com.au *.smtp-1.thequadrant.com.au *.smtp-relay.thequadrant.com.au *.smtp.thequadrant.com.au thequadrant.com.au *.thequadrant.com.au *.webdisk.thequadrant.com.au *.webmail.thequadrant.com.au *.wildcard.thequadrant.com.au *.ww25.thequadrant.com.au *.ww38.thequadrant.com.au *.www.thequadrant.com.au
*.5a2c55ec-834e-4fb8-8ee5-95e4446b118f.thescenicrim.com.au *.b95bc114-3e97-45dc-818e-bc6782b4690b.thescenicrim.com.au *.smtp-1.thescenicrim.com.au thescenicrim.com.au *.thescenicrim.com.au *.ww16.thescenicrim.com.au *.ww25.thescenicrim.com.au *.www.thescenicrim.com.au