76/100 SECURITY SCORE

Certificate Information

Subject
CN=freshwatercare.info
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
May 29, 2026
Valid Until
August 27, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:F6:B8:0F:47:8A:CF:08:D4:A8:DD:95:83:88:A9:82:2B:CA:17:7C:55:18:2F:1C:71:43:4A:EB:DD:50:9A:80
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
smartpineapple.io *.smartpineapple.io *.app.smartpineapple.io *.assets.smartpineapple.io *.autodiscover.smartpineapple.io *.evolution.smartpineapple.io *.imap.smartpineapple.io *.pop.smartpineapple.io *.tbgkxweb.smartpineapple.io *.uacnytbgkxweb.smartpineapple.io *.user.smartpineapple.io *.www.smartpineapple.io

Other domains in certificate

*.9fbbd9f8-4264-42e6-8f63-24c5271e99bf.agentic.menu *.admin.agentic.menu agentic.menu *.agentic.menu *.akwufsmtpauth.agentic.menu *.app.agentic.menu *.apps.agentic.menu *.assets.agentic.menu *.autodiscover.agentic.menu *.backup.agentic.menu *.barracuda.agentic.menu *.beta.agentic.menu *.d811320e-b47f-470c-9b18-b40a34f210fb.agentic.menu *.dev.agentic.menu *.docs.agentic.menu *.exchange.agentic.menu *.fhlcoww7.agentic.menu *.fxodjportal.agentic.menu *.gateway.agentic.menu *.gitlab.agentic.menu *.hostmaster.agentic.menu *.intranet.agentic.menu *.local.agentic.menu *.login.agentic.menu *.m.agentic.menu *.mail.agentic.menu *.mailer.agentic.menu *.mailgate.agentic.menu *.mailserver.agentic.menu *.marketing.agentic.menu *.mbox.agentic.menu *.mx01.agentic.menu *.my.agentic.menu *.othljzdgwdrklbuhostmaster.agentic.menu *.oxafqced.agentic.menu *.panel.agentic.menu *.portal.agentic.menu *.postmaster.agentic.menu *.qa.agentic.menu *.rklbuhostmaster.agentic.menu *.secure.agentic.menu *.share.agentic.menu *.sharepoint.agentic.menu *.shop.agentic.menu *.sitemaps.agentic.menu *.smtpauth.agentic.menu *.sqvpjhtr.agentic.menu *.staging.agentic.menu *.static.agentic.menu *.stg.agentic.menu *.support.agentic.menu *.uat.agentic.menu *.urpjzint.agentic.menu *.v2.agentic.menu *.wap.agentic.menu *.webdisk.agentic.menu *.whm.agentic.menu *.ww25.agentic.menu *.www1.agentic.menu *.xtkkpdemo.agentic.menu
*.a.freshwatercare.info *.api.freshwatercare.info *.app.freshwatercare.info *.assets.freshwatercare.info *.demo.freshwatercare.info *.dev.freshwatercare.info freshwatercare.info *.freshwatercare.info *.members.freshwatercare.info *.netd-3e7f6d0d04ac.freshwatercare.info *.rustore.freshwatercare.info *.zft7i4.freshwatercare.info
*.api.movies4u.bond movies4u.bond *.movies4u.bond *.notexistssitemaps.movies4u.bond