76/100 SECURITY SCORE

Certificate Information

Subject
CN=fungiquebec.ca
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 17, 2026
Valid Until
July 16, 2026 69 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BE:50:5F:DA:21:C4:39:95:8D:DD:FB:4E:44:46:DE:71:1D:DF:87:6E:6A:F1:8E:63:A2:15:0B:61:18:7C:7A:05
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
whitefirekush.com *.whitefirekush.com *.a.whitefirekush.com *.admin.whitefirekush.com *.api.whitefirekush.com *.app.whitefirekush.com *.assets.whitefirekush.com *.b9d55de7-51fc-4653-a3ba-cbe7411579ee.whitefirekush.com *.demo.whitefirekush.com *.dev.whitefirekush.com *.load.whitefirekush.com *.vpn.whitefirekush.com

Other domains in certificate

23goals.it.com *.23goals.it.com *.www.23goals.it.com
*.079f6347-46ab-4786-94f6-b62b86273b8f.aj-empregopg.co *.92a8771e-729e-4743-8a39-0b5509880aa4.aj-empregopg.co *.admin.aj-empregopg.co aj-empregopg.co *.aj-empregopg.co *.api.aj-empregopg.co *.app.aj-empregopg.co *.assets.aj-empregopg.co *.demo.aj-empregopg.co *.dev.aj-empregopg.co *.test.aj-empregopg.co
*.admin.bltth.com *.autoconfig.bltth.com bltth.com *.bltth.com *.cisco.bltth.com *.ciscovpn.bltth.com *.cloud.bltth.com *.connect.bltth.com *.cpanel.bltth.com *.firewall.bltth.com *.gateway.bltth.com *.m.bltth.com *.office.bltth.com *.relay.bltth.com *.remote.bltth.com *.secure.bltth.com *.smtp.bltth.com *.webmail.bltth.com *.webvpn.bltth.com
cantysol.com *.cantysol.com *.ke.cantysol.com
carhireeurope.com.au *.carhireeurope.com.au *.ww25.carhireeurope.com.au
*.312aa299-a2af-40c3-8fda-31bdc7593546.fungiquebec.ca *.3816611e-3416-47cb-9e15-f6367ec23a48.fungiquebec.ca *.5c1c8087-57c0-4baa-951f-279af7c34dfc.fungiquebec.ca *.88d20ad9-d797-49fd-b41b-83e2eb3d4f57.fungiquebec.ca *.ad3afd15-cdc8-4e86-974d-d31e476a7c7f.fungiquebec.ca *.admin.fungiquebec.ca *.admission.fungiquebec.ca *.cloud.fungiquebec.ca *.demo.fungiquebec.ca *.dev.fungiquebec.ca *.e5cf7857-4f80-4835-b144-15592df42f00.fungiquebec.ca *.email.fungiquebec.ca *.firewall.fungiquebec.ca *.ftp.fungiquebec.ca fungiquebec.ca *.fungiquebec.ca *.hostmaster.fungiquebec.ca *.hvgnzvip2.fungiquebec.ca *.m.fungiquebec.ca *.ns.fungiquebec.ca *.rd.fungiquebec.ca *.remote.fungiquebec.ca *.resource.fungiquebec.ca *.sitemap.fungiquebec.ca *.sitemaps.fungiquebec.ca *.testing.fungiquebec.ca *.vip2.fungiquebec.ca *.vpn.fungiquebec.ca *.webmail.fungiquebec.ca *.www.fungiquebec.ca
j-labor.com *.j-labor.com *.ww12.j-labor.com
nitricboostnearme.com *.nitricboostnearme.com
saporediromagna.com *.saporediromagna.com *.www.saporediromagna.com