76/100 SECURITY SCORE

Certificate Information

Subject
CN=newlysoughtafter.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 11, 2026
Valid Until
August 09, 2026 52 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:FC:FC:90:5F:CF:38:7E:3F:8D:99:FF:9B:04:4F:20:45:99:0D:2C:13:C9:BC:90:F1:AD:EE:C3:E5:DF:9E:A0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
zabawkolandia.com.pl *.zabawkolandia.com.pl *.25.zabawkolandia.com.pl *.dev.zabawkolandia.com.pl *.ftp.zabawkolandia.com.pl *.m.zabawkolandia.com.pl *.mail.zabawkolandia.com.pl *.outmail.zabawkolandia.com.pl *.pop.zabawkolandia.com.pl *.sitemap.zabawkolandia.com.pl *.sitemaps.zabawkolandia.com.pl *.smtp.zabawkolandia.com.pl *.smtps.zabawkolandia.com.pl *.webmail.zabawkolandia.com.pl *.ww16.zabawkolandia.com.pl *.ww25.zabawkolandia.com.pl *.ww38.zabawkolandia.com.pl *.www.zabawkolandia.com.pl

Other domains in certificate

bestbuya.com *.bestbuya.com *.ww16.bestbuya.com *.ww25.bestbuya.com *.ww38.bestbuya.com
biergarten.us *.biergarten.us *.random.biergarten.us
dns.bet *.dns.bet *.https.dns.bet *.io1955.dns.bet *.ndocfverify.dns.bet
dogcarecentre.org *.dogcarecentre.org
e28v.run *.e28v.run
elrodeomexican.com *.elrodeomexican.com *.hostmaster.elrodeomexican.com *.m.elrodeomexican.com *.sms.elrodeomexican.com *.staging.elrodeomexican.com *.transparencia.elrodeomexican.com *.ww1.elrodeomexican.com *.ww16.elrodeomexican.com *.ww25.elrodeomexican.com
eventfulsports.com *.eventfulsports.com
innerzenith.info *.innerzenith.info
jloknkywgdjt.cc *.jloknkywgdjt.cc
*.culvaton.kingmaxhomes.com kingmaxhomes.com *.kingmaxhomes.com
newlysoughtafter.com *.newlysoughtafter.com
*.email.nmmu.co.za *.hostmaster.nmmu.co.za *.live.nmmu.co.za nmmu.co.za *.nmmu.co.za *.www.nmmu.co.za
*.11.participates.org participates.org *.participates.org *.wildcard.participates.org *.ww43.participates.org
*.backup.psilmed.com *.dcab55c7-81a8-4732-bf50-4440428a6aba.psilmed.com psilmed.com *.psilmed.com *.test.psilmed.com *.v2.psilmed.com
*.crm.skillstory.io *.random.skillstory.io *.sitemaps.skillstory.io skillstory.io *.skillstory.io *.ww25.skillstory.io *.ww38.skillstory.io
*.dev.texasmedicalboard.com *.dns.texasmedicalboard.com *.home.texasmedicalboard.com *.mail9.texasmedicalboard.com *.random.texasmedicalboard.com *.research.texasmedicalboard.com texasmedicalboard.com *.texasmedicalboard.com *.ww38.texasmedicalboard.com