Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=leadershipcoaching684928.icu
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 29, 2026
Valid Until
April 29, 2026
77 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
27:FE:21:95:D5:72:20:26:6B:00:A3:49:92:1E:1F:AD:C9:01:F7:8F:DE:79:ED:5B:37:1A:6D:2F:DC:EC:A8:CE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
embarqspace.com
*.embarqspace.com
123moviesfd.net
*.123moviesfd.net
22mm.net
*.22mm.net
788jfi2jnez3.com
*.788jfi2jnez3.com
aicellplan.com
*.aicellplan.com
aiorganicfarm.com
*.aiorganicfarm.com
aniwaves.cc
*.aniwaves.cc
aollatgroup.com
*.aollatgroup.com
attessia.tv
*.attessia.tv
bakadame.com
*.bakadame.com
bancorpfirstmidwest.com
*.bancorpfirstmidwest.com
btranking.com
*.btranking.com
buyechina.com
*.buyechina.com
cgd09.top
*.cgd09.top
chicboho.com
*.chicboho.com
e-commerce-entwicklung306524.icu
*.e-commerce-entwicklung306524.icu
eos-53.com
*.eos-53.com
leadershipcoaching684928.icu
*.leadershipcoaching684928.icu
logisticscompany568743.icu
*.logisticscompany568743.icu
logisticscompany648267.icu
*.logisticscompany648267.icu
luxurycruisedeals421404.icu
*.luxurycruisedeals421404.icu
medicalpracticesoftware889594.icu
*.medicalpracticesoftware889594.icu
medicalpracticesoftware974996.icu
*.medicalpracticesoftware974996.icu
medizinischebehandlungen753090.icu
*.medizinischebehandlungen753090.icu
metalfabricationexperts133697.icu
*.metalfabricationexperts133697.icu
metalfabricationexperts519696.icu
*.metalfabricationexperts519696.icu
metalfabricationexperts521539.icu
*.metalfabricationexperts521539.icu
mirroid.com
*.mirroid.com
mortgageadviser473970.icu
*.mortgageadviser473970.icu
mortgagerefinance774353.icu
*.mortgagerefinance774353.icu
motorcycle-accident-attorney601848.icu
*.motorcycle-accident-attorney601848.icu
motorcycleaccidentattorney055397.icu
*.motorcycleaccidentattorney055397.icu
movingcompany691307.icu
*.movingcompany691307.icu
mp3juices3.cc
*.mp3juices3.cc
myrepeater.net
*.myrepeater.net
nakeddream.top
*.nakeddream.top
saludmentalyterapia887104.icu
*.saludmentalyterapia887104.icu
satelliteinternet044748.icu
*.satelliteinternet044748.icu
satelliteinternet092023.icu
*.satelliteinternet092023.icu
satelliteinternet689789.icu
*.satelliteinternet689789.icu
savemoneyonelectricitybills521566.icu
*.savemoneyonelectricitybills521566.icu
sclc-treatments769539.icu
*.sclc-treatments769539.icu
sellmyhousefast320448.icu
*.sellmyhousefast320448.icu
serviciosdeconstruccin641841.icu
*.serviciosdeconstruccin641841.icu
xhswglobal.com
*.xhswglobal.com
Other domains in certificate