76/100 SECURITY SCORE

Certificate Information

Subject
CN=betraying.me
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:C9:C3:AF:62:1F:EE:0A:33:7E:40:9F:05:EE:63:F6:65:D9:10:63:2C:8C:8B:8A:86:17:35:92:BF:39:5A:0C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
pulsediet.com *.pulsediet.com *.api.pulsediet.com *.backup.pulsediet.com *.dev.pulsediet.com *.mail.pulsediet.com *.sitemaps.pulsediet.com *.test.pulsediet.com *.vpn.pulsediet.com *.ww16.pulsediet.com *.ww38.pulsediet.com

Other domains in certificate

ansa.design *.ansa.design *.superset.ansa.design
armillaryspheres.co.uk *.armillaryspheres.co.uk *.ww25.armillaryspheres.co.uk
auclips.com *.auclips.com *.www.auclips.com
betraying.me *.betraying.me *.he.betraying.me
bornawful.us *.bornawful.us *.ww38.bornawful.us
cazzano.it *.cazzano.it *.hostmaster.cazzano.it
*.api.clicksilvex.com clicksilvex.com *.clicksilvex.com *.dev.clicksilvex.com *.hostmaster.clicksilvex.com *.vpn.clicksilvex.com *.ww38.clicksilvex.com
dealio.be *.dealio.be
derpyhoovescentral.com *.derpyhoovescentral.com *.ww25.derpyhoovescentral.com
dw98.cc *.dw98.cc *.ww25.dw98.cc
footybite.org *.footybite.org *.ww25.footybite.org
*.forum.globito.com globito.com *.globito.com *.hostmaster.globito.com *.ww25.globito.com
kingoftheroofconstruction.website *.kingoftheroofconstruction.website
noonootv04.site *.noonootv04.site *.ww38.noonootv04.site
*.m.outfit.tv *.mvdi0iozlv3bchii.outfit.tv outfit.tv *.outfit.tv
*.admin.pakurdu.xyz *.ftp.pakurdu.xyz *.login.pakurdu.xyz *.m.pakurdu.xyz pakurdu.xyz *.pakurdu.xyz *.ww25.pakurdu.xyz
piardihome1959.com *.piardihome1959.com *.sitemap.piardihome1959.com
pretamos.online *.pretamos.online *.ww25.pretamos.online
scheeks.com *.scheeks.com *.wildcard.scheeks.com *.ww25.scheeks.com
seudentista.com *.seudentista.com *.sitemap.seudentista.com *.ww16.seudentista.com *.ww17.seudentista.com *.ww38.seudentista.com
sexymovies.net *.sexymovies.net *.sitemaps.sexymovies.net
zync.solutions *.zync.solutions