Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=fixx.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026
65 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8A:74:74:D0:00:80:E2:65:99:53:15:D6:23:12:0C:47:E1:7E:3B:F4:5B:33:6F:D2:BE:16:BA:21:9A:E4:66:24
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
flatscreens.com.au
*.flatscreens.com.au
*.wildcard.flatscreens.com.au
*.app.exponent.au
exponent.au
*.exponent.au
*.wildcard.exponent.au
exponentialgrowth.au
*.exponentialgrowth.au
*.random.exponentialgrowth.au
*.wildcard.exponentialgrowth.au
exrental.com.au
*.exrental.com.au
*.wildcard.exrental.com.au
exrentaldvds.com.au
*.exrentaldvds.com.au
*.wildcard.exrentaldvds.com.au
eyesee.com.au
*.eyesee.com.au
*.webmail.eyesee.com.au
*.wildcard.eyesee.com.au
*.autodiscover.falconcollective.com.au
*.cpcalendars.falconcollective.com.au
*.cpcontacts.falconcollective.com.au
falconcollective.com.au
*.falconcollective.com.au
*.mail.falconcollective.com.au
*.webmail.falconcollective.com.au
*.wildcard.falconcollective.com.au
fashionblogs.com.au
*.fashionblogs.com.au
*.forum.fashionblogs.com.au
*.wildcard.fashionblogs.com.au
financialcounsellor.com.au
*.financialcounsellor.com.au
*.mobile.financialcounsellor.com.au
*.wildcard.financialcounsellor.com.au
*.account.financially.com.au
financially.com.au
*.financially.com.au
*.wildcard.financially.com.au
fincompare.com.au
*.fincompare.com.au
*.wildcard.fincompare.com.au
*.ww16.fincompare.com.au
*.ww38.fincompare.com.au
fineartgallery.com.au
*.fineartgallery.com.au
*.wildcard.fineartgallery.com.au
fishingvideos.com.au
*.fishingvideos.com.au
*.wildcard.fishingvideos.com.au
*.beta.fishlovers.com.au
fishlovers.com.au
*.fishlovers.com.au
*.order.fishlovers.com.au
*.stats.fishlovers.com.au
*.wildcard.fishlovers.com.au
*.ww38.fishlovers.com.au
fivesshopbrasil.com.br
*.fivesshopbrasil.com.br
*.random.fivesshopbrasil.com.br
*.wildcard.fivesshopbrasil.com.br
*.ww25.fivesshopbrasil.com.br
fivestarreviews.com.au
*.fivestarreviews.com.au
*.mail.fivestarreviews.com.au
*.wildcard.fivestarreviews.com.au
*.ww25.fivestarreviews.com.au
*.analytics.fixx.com.au
*.cms.fixx.com.au
*.demo.fixx.com.au
*.dev.fixx.com.au
fixx.com.au
*.fixx.com.au
*.laravel.fixx.com.au
*.new.fixx.com.au
*.panel.fixx.com.au
*.wildcard.fixx.com.au
*.ww16.fixx.com.au
*.ww17.fixx.com.au
*.ww38.fixx.com.au
flashsales.com.au
*.flashsales.com.au
*.wildcard.flashsales.com.au
flatbedprinting.com.au
*.flatbedprinting.com.au
*.mail.flatbedprinting.com.au
*.ns.flatbedprinting.com.au
*.wildcard.flatbedprinting.com.au
Other domains in certificate