Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=salus.live
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 12, 2026
Valid Until
April 12, 2026
62 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8B:1C:7A:20:30:CE:C3:B0:F7:13:72:50:19:40:AF:B9:D5:CD:1A:59:B0:2A:8F:84:C1:F6:FF:F7:4C:70:65:1B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
lvry.com
*.lvry.com
*.9843f923-9474-43bf-84a6-c66b3777496f.lvry.com
*.alpha.lvry.com
*.cjuqk.lvry.com
*.host.lvry.com
*.landryserp.lvry.com
*.mail.lvry.com
*.me.lvry.com
*.ww25.lvry.com
*.ww41.lvry.com
*.www.lvry.com
*.4729521.djjj1.xyz
djjj1.xyz
*.djjj1.xyz
*.ww25.djjj1.xyz
*.blog.emetsbank.xyz
*.cms.emetsbank.xyz
*.cn.emetsbank.xyz
*.com.emetsbank.xyz
*.demo.emetsbank.xyz
*.dev.emetsbank.xyz
emetsbank.xyz
*.emetsbank.xyz
*.m.emetsbank.xyz
*.mail.emetsbank.xyz
*.ops.emetsbank.xyz
*.site.emetsbank.xyz
*.ssl.emetsbank.xyz
*.test.emetsbank.xyz
*.wap.emetsbank.xyz
*.webmail.emetsbank.xyz
*.wordpress.emetsbank.xyz
*.wp.emetsbank.xyz
*.account.gpodaddy.com
gpodaddy.com
*.gpodaddy.com
*.int.gpodaddy.com
indigestion.com.au
*.indigestion.com.au
*.random.indigestion.com.au
*.files.izvezda.info
izvezda.info
*.izvezda.info
*.sitemap.izvezda.info
johanniskrautkapseln.de
*.johanniskrautkapseln.de
nvyou09.xyz
*.nvyou09.xyz
*.ww25.nvyou09.xyz
*.g91xoo.qdt5qq5.mom
*.htjrea.qdt5qq5.mom
qdt5qq5.mom
*.qdt5qq5.mom
*.rlz5tw.qdt5qq5.mom
*.xykbkn.qdt5qq5.mom
racinmasonfunzone.com
*.racinmasonfunzone.com
*.www.racinmasonfunzone.com
salus.live
*.salus.live
theatlamtis.com
*.theatlamtis.com
*.ww25.theatlamtis.com
*.comune.tlgp.org
*.mx.tlgp.org
tlgp.org
*.tlgp.org
traktorverleih.de
*.traktorverleih.de
xn--glteisen-1za.de
*.xn--glteisen-1za.de
xn--tortenaufstze-kfb.de
*.xn--tortenaufstze-kfb.de
*.dma.xohul.com
*.ww25.xohul.com
xohul.com
*.xohul.com
*.apk.yassinuxxx.store
*.health.yassinuxxx.store
*.mail.yassinuxxx.store
*.random.yassinuxxx.store
*.webmail.yassinuxxx.store
*.www.yassinuxxx.store
yassinuxxx.store
*.yassinuxxx.store
*.website.youx69.com
youx69.com
*.youx69.com
Other domains in certificate