Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=exchange-rates.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026
53 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A6:7C:28:D7:68:4F:D1:A5:FC:8E:E8:D3:56:8F:45:95:5E:60:DC:8D:2A:05:69:61:65:FB:0E:7D:A0:4A:80:4D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
exchangerates.au
*.exchangerates.au
*.wildcard.exchangerates.au
dntrade.cm
*.dntrade.cm
*.wildcard.dntrade.cm
emergencybeacons.com.au
*.emergencybeacons.com.au
*.wildcard.emergencybeacons.com.au
emusic.net.au
*.emusic.net.au
*.wildcard.emusic.net.au
*.autodiscover.energyrates.com.au
*.cpcalendars.energyrates.com.au
energyrates.com.au
*.energyrates.com.au
*.mail.energyrates.com.au
*.wildcard.energyrates.com.au
*.beta.entregadeexame.com.br
*.blog.entregadeexame.com.br
entregadeexame.com.br
*.entregadeexame.com.br
*.https.entregadeexame.com.br
*.random.entregadeexame.com.br
*.staging.entregadeexame.com.br
*.wildcard.entregadeexame.com.br
*.ww16.entregadeexame.com.br
entrepreneurawards.com.au
*.entrepreneurawards.com.au
*.wildcard.entrepreneurawards.com.au
*.baco-de-sangue.erastogaetner.com.br
*.banco-de-sangue.erastogaetner.com.br
*.centrocirugico.erastogaetner.com.br
*.centrocirurgico.erastogaetner.com.br
*.centrocirurugico.erastogaetner.com.br
*.cepep.erastogaetner.com.br
*.docsame.erastogaetner.com.br
erastogaetner.com.br
*.erastogaetner.com.br
*.fame.erastogaetner.com.br
*.frame.erastogaetner.com.br
*.inscricoes.erastogaetner.com.br
*.portal.erastogaetner.com.br
*.portaldopaciente.erastogaetner.com.br
*.portalpaciente.erastogaetner.com.br
*.random.erastogaetner.com.br
*.same.erastogaetner.com.br
*.samer.erastogaetner.com.br
*.wildcard.erastogaetner.com.br
*.ww25.erastogaetner.com.br
eroticdancer.com.au
*.eroticdancer.com.au
*.old.eroticdancer.com.au
*.wildcard.eroticdancer.com.au
eroticdancing.com.au
*.eroticdancing.com.au
*.wildcard.eroticdancing.com.au
esocial.com.au
*.esocial.com.au
*.wildcard.esocial.com.au
*.25.eurotruck2mods.com.br
eurotruck2mods.com.br
*.eurotruck2mods.com.br
*.wildcard.eurotruck2mods.com.br
*.ww38.eurotruck2mods.com.br
*.demo.evote.com.au
evote.com.au
*.evote.com.au
*.wildcard.evote.com.au
*.blog.exchange-rates.com.au
exchange-rates.com.au
*.exchange-rates.com.au
*.wildcard.exchange-rates.com.au
exchangestudent.au
*.exchangestudent.au
*.wildcard.exchangestudent.au
executivestaff.com.au
*.executivestaff.com.au
*.wildcard.executivestaff.com.au
exfleetvehicles.com.au
*.exfleetvehicles.com.au
*.wildcard.exfleetvehicles.com.au
female.au
*.female.au
*.wildcard.female.au
fireinspection.com.au
*.fireinspection.com.au
*.wildcard.fireinspection.com.au
radiantquest38.shop
*.radiantquest38.shop
Other domains in certificate