75/100 SECURITY SCORE

Certificate Information

Subject
CN=nownickeltech.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 03, 2026
Valid Until
January 01, 2027 64 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F8:55:08:45:F9:20:63:2E:88:98:20:B1:1C:EA:BB:EA:FB:A1:97:5C:43:D6:A0:E2:FB:43:D4:77:14:80:E9:94
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ecoadventureranch.com *.ecoadventureranch.com

Other domains in certificate

donutcore.com *.donutcore.com
driftbos.info *.driftbos.info
ecoblocksolutions.digital *.ecoblocksolutions.digital
eth.lighting *.eth.lighting
exclusivelyknb.com *.exclusivelyknb.com
financing-petroninvest.digital *.financing-petroninvest.digital
findascendagency.com *.findascendagency.com
futurepathossource.com *.futurepathossource.com
gameforce700.top *.gameforce700.top
getsnitchernet.com *.getsnitchernet.com
gosnitcherbot.com *.gosnitcherbot.com
gothatchops.com *.gothatchops.com
growdonuthub.com *.growdonuthub.com
grownewyorkacquisitionvision.com *.grownewyorkacquisitionvision.com
growpathosnext.com *.growpathosnext.com
h1h1.net *.h1h1.net
heartparis.com *.heartparis.com
houseaccountglobal.com *.houseaccountglobal.com
hynrix.sbs *.hynrix.sbs
hypernetprime.digital *.hypernetprime.digital
hysulfoselenide.com *.hysulfoselenide.com
incorporatedv.com *.incorporatedv.com
infrahypervault.click *.infrahypervault.click
joindonutstack.com *.joindonutstack.com
joindonutsystems.com *.joindonutsystems.com
joiniconicnext.com *.joiniconicnext.com
kyberscwp.com www.kyberscwp.com
labsnickeltech.com *.labsnickeltech.com
labsthatchtrack.com *.labsthatchtrack.com
limb.com.cn *.limb.com.cn
linkdomain365.digital *.linkdomain365.digital
lms-s-xcewery.cc *.lms-s-xcewery.cc
magic.to *.magic.to
mellat.app *.mellat.app
mockesend.com *.mockesend.com
myfrancoscafe.com *.myfrancoscafe.com
newspublishers.digital *.newspublishers.digital
newyorkacquisitionworks.com *.newyorkacquisitionworks.com
nexylog.com *.nexylog.com
nownickeltech.com *.nownickeltech.com
nowthatchstack.com *.nowthatchstack.com
orbitsystemsio.click *.orbitsystemsio.click
ospqeg.my *.ospqeg.my
reetexam.in *.reetexam.in