75/100 SECURITY SCORE

Certificate Information

Subject
CN=dickjohnsonracing.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 11, 2026
Valid Until
December 10, 2026 38 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
68:5B:DF:6F:D1:11:CF:E5:A5:94:2A:C4:0F:28:56:AF:05:55:06:99:20:D1:B9:EF:D1:CB:22:56:B2:22:2F:DB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
dickjohnsonracing.au *.dickjohnsonracing.au *.ww25.dickjohnsonracing.au

Other domains in certificate

11xv.com *.11xv.com
95480.vip *.95480.vip
americaisthebestoilconsumingcountry.xyz *.americaisthebestoilconsumingcountry.xyz *.app.americaisthebestoilconsumingcountry.xyz
*.admin.blociins.site *.app.blociins.site blociins.site *.blociins.site *.staging.blociins.site
crxy-s-zuykweo.top *.crxy-s-zuykweo.top
*.2k0h5jlw.gefegef.cc gefegef.cc *.gefegef.cc
3d72f158-2419-4ffd-b786-f108233cd1ac.greenwichrealestate.au 46acf97a-7e94-4dbc-b520-943cf3c8202c.greenwichrealestate.au community.greenwichrealestate.au emv1.greenwichrealestate.au greenwichrealestate.au ns.greenwichrealestate.au qudafkhj.greenwichrealestate.au smqoaroqcdns.greenwichrealestate.au www.greenwichrealestate.au
*.app.luminstore.live luminstore.live *.luminstore.live
partnerscrewour.co *.partnerscrewour.co
pgaaxee.biz *.pgaaxee.biz
pokerdom25.xyz *.pokerdom25.xyz
ruusbe.com *.ruusbe.com
thebaycityrollers.co.uk *.thebaycityrollers.co.uk *.ww25.thebaycityrollers.co.uk
*.7.truyenvn.vip *.c.truyenvn.vip *.e.truyenvn.vip *.game.truyenvn.vip *.raw.truyenvn.vip truyenvn.vip *.truyenvn.vip *.ww1.truyenvn.vip *.ww12.truyenvn.vip *.ww25.truyenvn.vip *.ww7.truyenvn.vip *.www.truyenvn.vip
xn--pwta.cc *.xn--pwta.cc
*.2019.xtremecustomcurbing.com *.admin.xtremecustomcurbing.com *.api.xtremecustomcurbing.com *.autodiscover.xtremecustomcurbing.com *.crm.xtremecustomcurbing.com *.dashboard.xtremecustomcurbing.com *.dev.xtremecustomcurbing.com *.jzsqkruv.xtremecustomcurbing.com *.lime.xtremecustomcurbing.com *.m.xtremecustomcurbing.com *.mail.xtremecustomcurbing.com *.mongodb.xtremecustomcurbing.com *.mx7.xtremecustomcurbing.com *.posta.xtremecustomcurbing.com *.qa.xtremecustomcurbing.com *.stg.xtremecustomcurbing.com *.test.xtremecustomcurbing.com *.uat.xtremecustomcurbing.com *.v2.xtremecustomcurbing.com *.web.xtremecustomcurbing.com *.webmail.xtremecustomcurbing.com *.wildcard.xtremecustomcurbing.com xtremecustomcurbing.com *.xtremecustomcurbing.com
yqhrm.gdn *.yqhrm.gdn
zelaka.info *.zelaka.info