Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=jacksoncountyremc.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 03, 2026
Valid Until
August 01, 2026
84 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8C:7E:B3:EE:59:BE:37:A0:36:29:82:58:2B:5F:58:35:BD:CC:F1:BA:4A:3A:47:7D:78:78:37:5D:86:4C:1E:7F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
eleosflow.org
*.eleosflow.org
*.api.eleosflow.org
*.app.eleosflow.org
*.autodiscover.eleosflow.org
*.d7247b71-d4f0-44f1-9458-68f862bb41a0.eleosflow.org
*.m.eleosflow.org
*.owa.eleosflow.org
*.webmail.eleosflow.org
913975.cc
*.913975.cc
*.cc.913975.cc
aglesm.com
*.aglesm.com
apktimo.com
*.apktimo.com
bigegg.org
*.bigegg.org
*.ftp.bigegg.org
*.imap.bigegg.org
*.m.bigegg.org
*.mail.bigegg.org
*.pop.bigegg.org
*.projects.bigegg.org
*.smtp.bigegg.org
*.webmail.bigegg.org
*.whm.bigegg.org
*.www.bigegg.org
businessmediation.com.au
*.businessmediation.com.au
clinicauniversitaria.com
*.clinicauniversitaria.com
*.ww16.clinicauniversitaria.com
columbiatireoutlet.com
*.columbiatireoutlet.com
*.random.columbiatireoutlet.com
fiestamark.com
*.fiestamark.com
fujiyamakyousei.com
*.fujiyamakyousei.com
*.hostmaster.fujiyamakyousei.com
*.www.fujiyamakyousei.com
*.ad.jacksoncountyremc.com
*.bbs.jacksoncountyremc.com
jacksoncountyremc.com
*.jacksoncountyremc.com
*.shop.jacksoncountyremc.com
*.wp.jacksoncountyremc.com
*.api.monto168k.live
monto168k.live
*.monto168k.live
*.random.monto168k.live
*.mwww.mybenifitscalwin.org
mybenifitscalwin.org
*.mybenifitscalwin.org
*.random.mybenifitscalwin.org
personalshelters.com
*.personalshelters.com
*.app.pollical.com
*.bbs.pollical.com
*.exchange.pollical.com
*.ftp.pollical.com
*.fw1a.pollical.com
*.fw2a.pollical.com
*.mail2.pollical.com
pollical.com
*.pollical.com
*.random.pollical.com
*.www.pollical.com
rhabarberkompott.de
*.rhabarberkompott.de
shoeslover.co
*.shoeslover.co
*.ww25.shoeslover.co
*.ww3.shoeslover.co
vadinner.com
*.vadinner.com
*.ww25.vadinner.com
*.m.xn--k7y655b.com
xn--k7y655b.com
*.xn--k7y655b.com
*.ww16.ytnit.cc
ytnit.cc
*.ytnit.cc
*.i.ywfo.com
*.mx1.ywfo.com
*.random.ywfo.com
*.roberts-richardson-table.ywfo.com
ywfo.com
*.ywfo.com
Other domains in certificate