SSL Certificate Analysis for dev.worldhomeshub.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=23535.bet

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

May 11, 2026

Valid Until

August 09, 2026 54 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

10:48:C2:E5:27:5E:11:7E:B2:30:DE:1F:8A:36:80:CE:0F:E6:46:94:21:47:6A:0D:06:3D:77:1B:7B:09:C4:4A

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

worldhomeshub.com *.worldhomeshub.com *.app.worldhomeshub.com *.demo.worldhomeshub.com *.dev.worldhomeshub.com *.otbmhb.worldhomeshub.com *.staging.worldhomeshub.com *.test.worldhomeshub.com *.wfhujhcfdnotbmhb.worldhomeshub.com

Other domains in certificate

23535.bet *.23535.bet

23764.one *.23764.one

23b72ff1824ef43f.com *.23b72ff1824ef43f.com

24489.one *.24489.one

downloadziphone.org *.downloadziphone.org *.ww38.downloadziphone.org

*.51ac1881-e73a-45c9-a746-0874e1952c49.fuckhero.nl *.70095628-40f0-4391-9502-175c2236ae12.fuckhero.nl *.924768bc-8ed1-4551-984e-4729dfafc765.fuckhero.nl *.admin.fuckhero.nl *.administration.fuckhero.nl *.aging.fuckhero.nl *.api.fuckhero.nl *.app.fuckhero.nl *.backend.fuckhero.nl *.blog.fuckhero.nl *.ci.fuckhero.nl *.cicd.fuckhero.nl *.cloud.fuckhero.nl *.clsshdev.fuckhero.nl *.crm.fuckhero.nl *.dev.fuckhero.nl *.emv1.fuckhero.nl *.fojrjrd.fuckhero.nl fuckhero.nl *.fuckhero.nl *.hotfix.fuckhero.nl *.intranet.fuckhero.nl *.lime.fuckhero.nl *.m.fuckhero.nl *.mail.fuckhero.nl *.members.fuckhero.nl *.notexistsww.fuckhero.nl *.partner.fuckhero.nl *.portal.fuckhero.nl *.prod.fuckhero.nl *.rd.fuckhero.nl *.rds.fuckhero.nl *.rdweb.fuckhero.nl *.remote.fuckhero.nl *.shop.fuckhero.nl *.sitemaps.fuckhero.nl *.sms.fuckhero.nl *.staging.fuckhero.nl *.store.fuckhero.nl *.support.fuckhero.nl *.test.fuckhero.nl *.tickets.fuckhero.nl *.user.fuckhero.nl *.vpn.fuckhero.nl *.vw.fuckhero.nl *.webdisk.fuckhero.nl *.webmail.fuckhero.nl *.werkenbij.fuckhero.nl *.ww.fuckhero.nl *.wwe.fuckhero.nl *.www.fuckhero.nl *.wwww.fuckhero.nl *.xxx.fuckhero.nl