89/100 SECURITY SCORE

Certificate Information

Subject
CN=forms.orfinex.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 07, 2026
Valid Until
April 07, 2026 67 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4E:29:93:71:FC:26:10:8C:8B:AA:2F:2E:A1:5C:73:28:54:41:45:0B:13:1F:88:99:84:FC:25:2E:96:4E:50:0B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Basic
script-src; connect-src; frame-src
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Configured (Restricts certificate issuance)
Current Issuer
Authorized (Matches CAA policy)
Recommendations
  • Consider using critical flag (flags=128) for stricter CAA enforcement
  • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
  • Consider adding 'issuewild' records to control wildcard certificate issuance

Subject Alternative Names

88 domains
forms.vexotics.com

Other domains in certificate

forms.3fitt.com
forms.4rentforms.com
forms.askvertex.com
forms.aurelian-group.com
forms.baltimorecashbuyer.com
forms.bedrock4.com
forms.bedtimestore.com.au
form.berrylab.xyz
forms.bienici.com
forms.birddog.tv
forms.brainsolutions.be
form.brioagri.in
forms.campa.com.mx
forms.cash2bitcoin.com
forms.cedarwick.llc
forms.clientcentral.io
invoice.pssi.co.id
forms.automateai.co.il forms.tornado-top.co.il
forms.servicios.mundomotriz.com.ec
forms.ocsports.com.my
forms.confuciobarcelona.cat
forms.crystalcleanct.com
event.cuzine.com
forms.distillationconclave.com
forms.doqsoft.com
forms.ds-int.org
inquiry.eandg.co.jp
finance.eprogram.store
forms.exporv.com
enroll.fcmarina.com
forms.fenixestudio.com
smart.foodstandard.gr
smart.foodstandard.tools
forms.fruits360.io
forms.ghostcabbit.com
forms.gigimoda.com
forms.greenangelventures.com
forms.gtmarketing.net
forms.hiredgun.net
forms.incba.org
forms.ira123.com
my.itribe.co.za online.itribe.co.za quote.itribe.co.za
forms.jris.com
forms.kafoodle.com
form.langkawitour.com
form-marketing.lifemap.jp
forms.lifemastergroup.com
f01.littlecaesarsksa.com
forms.membersdevelopment.com
webforms.morantconsulting.com
signup.musegravity.com
forms.narjis.sa
forms.netcoprocessing.com
forms.okgomarket.com
forms.oniwa.co.jp
forms.orfinex.com
form.perspectivesimaging.com
forms.potatohead.co
forms.powerstonepm.com
form.q14.plus
forms.rareglobalfood.com.rareglobalfood.com
invoice.rocktree.sg
forms.sadnaot.com
forms.sallybergmanlaw.com
form.sbaccel.com
forms.sbadirectaccess.com
upload.scanyournav.com
forms.sealanguages.com
forms.securesign24x7.com
forms.seeitnow.info
jobs.six11.org
forms.stephanielox.com
forms.stesa.it
form.syrian-community.org
my.taxisure.co.za online.taxisure.co.za
forms.tech-titan.com
forms.techtorque.com.au
forms.the310i.com
formularios.timospro.com
forms.tribalfitt.com
forms.twerlo.com
forms.unlimitedtaxes.com
forms.weprototype.tech