75/100 SECURITY SCORE

Certificate Information

Subject
CN=wwwlhealthnet.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 06, 2026
Valid Until
January 04, 2027 60 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
49:54:FD:5F:72:29:00:D4:19:9B:B9:12:58:B4:D0:70:11:AB:53:22:DE:F4:78:B7:6D:29:70:8B:9A:50:D4:56
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
eexpress-scripts.com *.eexpress-scripts.com *.ww1.eexpress-scripts.com

Other domains in certificate

artinstituteofpitsburg.com *.artinstituteofpitsburg.com
*.access.bryantschools.com bryantschools.com *.bryantschools.com *.checkin.bryantschools.com *.connectvpn.bryantschools.com *.mailgate.bryantschools.com *.rd.bryantschools.com *.remoteaccess.bryantschools.com *.vpn1.bryantschools.com *.ww11.bryantschools.com
burnaquranday.com *.burnaquranday.com
cabagediet.com *.cabagediet.com
carolinaeastmall.com *.carolinaeastmall.com
*.beta.cartoonetwoek.com cartoonetwoek.com *.cartoonetwoek.com *.m.cartoonetwoek.com
craftsfood.com *.craftsfood.com
*.demo.discovreyhealth.com discovreyhealth.com *.discovreyhealth.com *.ww10.discovreyhealth.com
*.demo.discretedrugs.com discretedrugs.com *.discretedrugs.com *.forums.discretedrugs.com *.help.discretedrugs.com
dopebomb.com *.dopebomb.com
*.api.drugstrore.com drugstrore.com *.drugstrore.com *.ww41.drugstrore.com
e-fills.com *.e-fills.com
extrememakeup.com *.extrememakeup.com *.random.extrememakeup.com
fincofinancial.com *.fincofinancial.com
flexril.com *.flexril.com
hollistercom.com *.hollistercom.com
magmarx.com *.magmarx.com *.ww12.magmarx.com
*.api.maxheight.com *.ebay.maxheight.com *.m.maxheight.com *.mail.maxheight.com maxheight.com *.maxheight.com *.test.maxheight.com *.testing.maxheight.com
*.app.maysdrugs.com maysdrugs.com *.maysdrugs.com *.ww12.maysdrugs.com *.www.maysdrugs.com
*.a88494b3-5e8f-459f-9160-aea8d3670dbe.nbwebexpresss.com *.m.nbwebexpresss.com nbwebexpresss.com *.nbwebexpresss.com
netzeroemail.com *.netzeroemail.com
refils.com *.refils.com *.ww12.refils.com
*.app.wwwlhealthnet.com *.ww12.wwwlhealthnet.com wwwlhealthnet.com *.wwwlhealthnet.com
*.gateway.zauder.com *.mobile.zauder.com *.mx.zauder.com *.staging.zauder.com *.vpn.zauder.com *.webvpn.zauder.com zauder.com *.zauder.com