76/100 SECURITY SCORE

Certificate Information

Subject
CN=theinspider.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 28, 2026
Valid Until
July 27, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8F:FE:F5:D6:D4:F2:83:C7:3B:CB:CD:01:97:D6:E7:65:17:0E:73:05:51:A1:2C:E4:B5:7D:33:E1:C5:07:76:44
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
mtiledesign.com *.mtiledesign.com *.access.mtiledesign.com *.admin.mtiledesign.com *.cisco.mtiledesign.com *.ciscovpn.mtiledesign.com *.firewall.mtiledesign.com *.gateway.mtiledesign.com *.login.mtiledesign.com *.outlook.mtiledesign.com *.portal.mtiledesign.com *.relay.mtiledesign.com *.remote.mtiledesign.com *.secure.mtiledesign.com *.webvpn.mtiledesign.com

Other domains in certificate

*.a.appstarted.com appstarted.com *.appstarted.com
*.app.dutapoker.co *.b107219c-19ed-414f-9c0d-f89ae775dd3d.dutapoker.co dutapoker.co *.dutapoker.co *.marketing.dutapoker.co *.mta-sts.dutapoker.co *.staging.dutapoker.co
*.alpha-testnet.hallsofolympia.io *.api-vslice-v1.hallsofolympia.io *.app-vslice.hallsofolympia.io *.app.hallsofolympia.io *.game-alpha.hallsofolympia.io hallsofolympia.io *.hallsofolympia.io *.stream-net00.hallsofolympia.io *.stream-net01.hallsofolympia.io *.test00.hallsofolympia.io *.ww25.hallsofolympia.io *.ww38.hallsofolympia.io
hyra.life *.hyra.life
luckyluckylucky.com *.luckyluckylucky.com *.www.luckyluckylucky.com
*.admin.nihongo.it *.demo.nihongo.it nihongo.it *.nihongo.it *.staging.nihongo.it *.webmail.nihongo.it
*.app.nrgapp.net nrgapp.net *.nrgapp.net *.random.nrgapp.net *.ww25.nrgapp.net
obituary.com.gh *.obituary.com.gh
*.hotmail.pantanal.com pantanal.com *.pantanal.com
smshunt.com *.smshunt.com *.text2fun.smshunt.com
*.35541d74-cd7d-471b-bb52-f5327a036bd3.stapshap.industries *.admin.stapshap.industries *.apps.stapshap.industries *.autodiscover.stapshap.industries *.demo.stapshap.industries *.mail.stapshap.industries stapshap.industries *.stapshap.industries
*.601498f6-0108-4198-975c-b092d74318df.theinspider.com *.app.theinspider.com *.backup.theinspider.com *.cpcalendars.theinspider.com *.dashboard.theinspider.com *.mail.theinspider.com theinspider.com *.theinspider.com *.webmail.theinspider.com *.wp.theinspider.com *.yqrwdmail.theinspider.com
*.random.to-fa.com *.spf01.to-fa.com *.spf03.to-fa.com to-fa.com *.to-fa.com
*.a.toolstoda.com toolstoda.com *.toolstoda.com