Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bloomsburyresidences.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 19, 2026
Valid Until
December 18, 2026
50 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
DD:54:C6:7A:EC:00:C6:A2:A4:F7:81:1D:B7:38:FC:A1:9D:ED:B3:86:3C:72:AA:0D:24:C4:D0:F7:D2:CB:5A:26
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
documentalon.com
www.documentalon.com
bjywzp.net.cn
*.bjywzp.net.cn
bloomsburyresidences.com
www.bloomsburyresidences.com
bluelotusce.com
*.bluelotusce.com
budgico.digital
*.budgico.digital
bwvnpsq486.vip
*.bwvnpsq486.vip
bxyt854.com.cn
*.bxyt854.com.cn
bziue.com
*.bziue.com
calibratestack.com
*.calibratestack.com
centerquantum.digital
*.centerquantum.digital
chafo.com.cn
*.chafo.com.cn
changpuak360.com
www.changpuak360.com
checkmonitormate.com
*.checkmonitormate.com
cisne.com.cn
*.cisne.com.cn
cloudprime.click
*.cloudprime.click
connectcorex2.click
*.connectcorex2.click
contactlensg.com
www.contactlensg.com
dlyybj.com.cn
*.dlyybj.com.cn
dmoolzpziad.com
*.dmoolzpziad.com
dynamoforgeg.info
*.dynamoforgeg.info
e-sunde.com.cn
*.e-sunde.com.cn
echochamber.click
*.echochamber.click
economy.lol
*.economy.lol
elythar.site
*.elythar.site
epartslandsh.shop
www.epartslandsh.shop
faizsport.com
www.faizsport.com
fastseeding.com
www.fastseeding.com
fusionnextgenpro.click
*.fusionnextgenpro.click
futureglowg.info
*.futureglowg.info
fvwebs.com
*.fvwebs.com
gardenerstrust.xyz
*.gardenerstrust.xyz
guestverify74112-booking.com
www.guestverify74112-booking.com
gynd2mrc3h.top
*.gynd2mrc3h.top
haxora.info
*.haxora.info
helensamuelsavannah.com
*.helensamuelsavannah.com
hetzwerk.sbs
www.hetzwerk.sbs
iamevent.net
www.iamevent.net
icermfo.lat
*.icermfo.lat
infinityloopg.info
*.infinityloopg.info
insightstrategy.buzz
*.insightstrategy.buzz
inslimited.com
www.inslimited.com
jimbang.com
*.jimbang.com
labsnextgen360.click
*.labsnextgen360.click
lestari-taman.com
www.lestari-taman.com
loveinagorden.com
www.loveinagorden.com
Other domains in certificate