Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=trendyol.site
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 29, 2025
Valid Until
March 29, 2026 47 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A6:2A:8D:64:69:CD:4C:82:73:D4:A3:BE:22:FA:88:51:CC:77:C1:70:83:64:40:76:BC:D7:2F:30:19:6D:99:7A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
exotic.name *.exotic.name

Other domains in certificate

4lfg.xyz *.4lfg.xyz
7jw.buzz *.7jw.buzz *.www.7jw.buzz
encuentrospor.com *.encuentrospor.com
*.casino.fandaul.com fandaul.com *.fandaul.com *.shop.fandaul.com
la-rose-passementarie.com *.la-rose-passementarie.com
lowfaress.us *.lowfaress.us *.ww25.lowfaress.us
*.ce.mindvally.com *.marisa.mindvally.com mindvally.com *.mindvally.com *.quest.mindvally.com
momentumcalcilator.org *.momentumcalcilator.org *.ww25.momentumcalcilator.org
mum2013.org *.mum2013.org
musicdownloader.pro *.musicdownloader.pro
ngf.com.au *.ngf.com.au *.random.ngf.com.au *.ww38.ngf.com.au
projectconsultants.com.au *.projectconsultants.com.au
*.mx.rubasonora.com rubasonora.com *.rubasonora.com
*.cpanel.simayof.com *.cpcalendars.simayof.com *.llzx.simayof.com *.newstudent.simayof.com *.server.simayof.com simayof.com *.simayof.com *.sso.simayof.com *.ww16.simayof.com
superundies.co *.superundies.co
thephillykitty.org *.thephillykitty.org
*.0rtwork-api-vplaylistproxy-origine.trendyol.site *.a01.trendyol.site *.adev.trendyol.site *.airbnbsquatter.trendyol.site *.aws.trendyol.site *.bf1.trendyol.site *.cceng.trendyol.site *.cloud.trendyol.site *.com.trendyol.site *.corp.trendyol.site *.cpy72a.trendyol.site *.edge.trendyol.site *.elb.trendyol.site *.exchange.trendyol.site *.fet.trendyol.site *.fwd.trendyol.site *.g03.trendyol.site *.gcp.trendyol.site *.kayakfresh.trendyol.site *.laxcom.trendyol.site *.netflix-cyprus.trendyol.site *.next.trendyol.site *.paypal-caseid9125.trendyol.site *.paypal-update-verify.trendyol.site *.runway.trendyol.site *.service-staging.trendyol.site *.sportsbook.trendyol.site *.stage.trendyol.site *.stores.trendyol.site *.test.trendyol.site trendyol.site *.trendyol.site *.twitter-alternatives.trendyol.site *.wc.trendyol.site *.xuat.trendyol.site
*.random.trillian.au trillian.au *.trillian.au