Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=zentech.cfd
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 12, 2026
Valid Until
August 10, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:C0:2D:D1:62:F8:D7:1C:CF:D1:57:A2:FC:8B:81:E8:1A:CE:CB:4B:56:52:F0:E4:48:B9:90:27:44:96:EA:9E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
dresskeep.org *.dresskeep.org *.api.dresskeep.org *.new.dresskeep.org *.uat.dresskeep.org

Other domains in certificate

abfreboot.com *.abfreboot.com *.b1.abfreboot.com *.de.abfreboot.com *.intranet.abfreboot.com *.ww38.abfreboot.com
accounting-solutions.click *.accounting-solutions.click *.ww38.accounting-solutions.click
artcrafts.co *.artcrafts.co *.m.artcrafts.co
autotraders.live *.autotraders.live *.dcwinbfv.autotraders.live *.pemsxivr.autotraders.live *.v1.autotraders.live
czemoney.xyz *.czemoney.xyz *.hostmaster.czemoney.xyz *.ww25.czemoney.xyz
duboku.ws *.duboku.ws *.paz.duboku.ws *.ww12.duboku.ws
ghanaembassy-germany.com *.ghanaembassy-germany.com *.mail.ghanaembassy-germany.com *.ww25.ghanaembassy-germany.com *.ww38.ghanaembassy-germany.com
*.cpcalendars.hdmovies50.com *.gitlab.hdmovies50.com hdmovies50.com *.hdmovies50.com *.mail.hdmovies50.com *.vlc-record-2023-11-20-11h40m07s-www.hdmovies50.com *.webdisk.hdmovies50.com *.ww12.hdmovies50.com *.ww38.hdmovies50.com *.www.hdmovies50.com *.wwww.hdmovies50.com
lanfor.com.br *.lanfor.com.br *.pagamento.lanfor.com.br
lilysfloristbali.com *.lilysfloristbali.com *.m.lilysfloristbali.com
maran.live *.maran.live *.ww38.maran.live
*.fj.picmovies.com picmovies.com *.picmovies.com
piermont-ny.org *.piermont-ny.org *.rlsbj.piermont-ny.org *.wap.piermont-ny.org *.ww17.piermont-ny.org
*.0ff20dfd-407f-4f78-8fe5-9ca96b3e4518.sds-tarakanita1.org *.dev.sds-tarakanita1.org *.f25dbfe3-9e0d-49a5-a92c-04d2b7465093.sds-tarakanita1.org sds-tarakanita1.org *.sds-tarakanita1.org *.staging.sds-tarakanita1.org *.uat.sds-tarakanita1.org *.vnd35i.sds-tarakanita1.org
shrtnr.tech *.shrtnr.tech
tg76d.com *.tg76d.com *.ww38.tg76d.com
*.api.waupunhockey.org *.app.waupunhockey.org *.mta-sts.waupunhockey.org *.qbawwmembers.waupunhockey.org *.staging.waupunhockey.org *.stores.waupunhockey.org *.test.waupunhockey.org waupunhockey.org *.waupunhockey.org *.web.waupunhockey.org *.www.waupunhockey.org
*.millie-thomas-facebook.zentech.cfd zentech.cfd *.zentech.cfd