76/100 SECURITY SCORE

Certificate Information

Subject
CN=howtotravel.info
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 02, 2026
Valid Until
July 31, 2026 53 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
ED:9B:C2:F9:BE:56:5A:8F:66:EF:5C:50:D4:73:F8:54:18:18:9E:6F:35:E6:9E:42:7F:09:74:F1:77:63:1A:EB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
wwwstellantis-fs.com *.wwwstellantis-fs.com *.dev.wwwstellantis-fs.com

Other domains in certificate

applewatchfaces.io *.applewatchfaces.io *.cdn-1.applewatchfaces.io *.cdn-4.applewatchfaces.io *.exbi.applewatchfaces.io *.ss-user.applewatchfaces.io *.visualizations-secure.applewatchfaces.io *.wildcard.applewatchfaces.io *.ww25.applewatchfaces.io
code-paper.com *.code-paper.com *.es.code-paper.com *.hi.code-paper.com *.is.code-paper.com *.it.code-paper.com *.ko.code-paper.com *.pl.code-paper.com *.ro.code-paper.com *.sk.code-paper.com *.th.code-paper.com *.tr.code-paper.com *.zh.code-paper.com
*.018c76e4-14c5-4e5c-91b3-f2fa40af0919.howtotravel.info *.alpinesurvival.howtotravel.info *.arcdetriompheparis.howtotravel.info *.bestos.howtotravel.info *.beta.howtotravel.info *.cbdhealthandwealth.howtotravel.info *.chat.howtotravel.info *.grandpalaisparis.howtotravel.info *.healthtrain.howtotravel.info howtotravel.info *.howtotravel.info *.islandboracay.howtotravel.info *.louvreparis.howtotravel.info *.m.howtotravel.info *.medhealthplus.howtotravel.info *.pqq.howtotravel.info *.preprod.howtotravel.info *.prod.howtotravel.info *.ptgrandpalaisparis.howtotravel.info *.superglobalcorp.howtotravel.info *.survivaledgelights.howtotravel.info *.users.howtotravel.info *.vanguardsurvival.howtotravel.info *.vnyzsoax.howtotravel.info *.www.howtotravel.info
howtotweet.com *.howtotweet.com *.ww25.howtotweet.com
ixka.com *.ixka.com *.ku.ixka.com *.mx1.ixka.com
*.random.simplychinese.co.uk simplychinese.co.uk *.simplychinese.co.uk *.ww1.simplychinese.co.uk
*.dev.usertestig.com *.insight.usertestig.com *.preprod.usertestig.com *.staging.usertestig.com *.tech.usertestig.com usertestig.com *.usertestig.com *.ww1.usertestig.com *.ww25.usertestig.com *.ww3.usertestig.com *.ww8.usertestig.com
*.mail.vigneshfruits.com *.pepay.vigneshfruits.com vigneshfruits.com *.vigneshfruits.com *.webdisk.vigneshfruits.com *.ww25.vigneshfruits.com *.ww38.vigneshfruits.com *.www.vigneshfruits.com
*.fdc.warganetlife.com *.lwvzs.warganetlife.com *.random.warganetlife.com warganetlife.com *.warganetlife.com *.ww25.warganetlife.com *.ww38.warganetlife.com
*.1.yasezz4.com yasezz4.com *.yasezz4.com