Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=foff.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 29, 2026
Valid Until
December 28, 2026
56 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
99:DA:35:76:B4:40:55:46:C0:5D:CF:E6:1E:EA:91:2C:FA:0C:9B:92:A8:9A:D6:91:DF:6C:3D:27:F4:B8:C1:C8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
freedownload.com.au
*.freedownload.com.au
*.wildcard.freedownload.com.au
*.ww16.freedownload.com.au
*.ww38.freedownload.com.au
51951.cc
*.51951.cc
foff.com.au
*.foff.com.au
*.wildcard.foff.com.au
footballguide.com.au
*.footballguide.com.au
*.preview.footballguide.com.au
*.team.footballguide.com.au
*.wildcard.footballguide.com.au
footyplayer.com.au
*.footyplayer.com.au
*.shop.footyplayer.com.au
*.wildcard.footyplayer.com.au
fortitude.au
*.fortitude.au
*.wildcard.fortitude.au
franchisordirectory.com.au
*.franchisordirectory.com.au
*.wildcard.franchisordirectory.com.au
fruiterers.com.au
*.fruiterers.com.au
*.wildcard.fruiterers.com.au
fundable.au
*.fundable.au
*.wildcard.fundable.au
*.ww38.fundable.au
fundracer.au
*.fundracer.au
*.random.fundracer.au
*.wildcard.fundracer.au
*.ww25.fundracer.au
*.ww38.fundracer.au
furnitureremovalssunshinecoast.com.au
*.furnitureremovalssunshinecoast.com.au
*.wildcard.furnitureremovalssunshinecoast.com.au
*.blog.futebolplayhd.com.br
*.chrome.futebolplayhd.com.br
*.club-vegas.futebolplayhd.com.br
futebolplayhd.com.br
*.futebolplayhd.com.br
*.httpswww.futebolplayhd.com.br
*.mail.futebolplayhd.com.br
*.microsoft-jackpot.futebolplayhd.com.br
*.mx.futebolplayhd.com.br
*.ns1.futebolplayhd.com.br
*.random.futebolplayhd.com.br
*.wildcard.futebolplayhd.com.br
*.ww25.futebolplayhd.com.br
*.ww38.futebolplayhd.com.br
galactic.au
*.galactic.au
*.wildcard.galactic.au
*.blog.galaxies.com.au
galaxies.com.au
*.galaxies.com.au
*.wildcard.galaxies.com.au
gasnews.com.au
*.gasnews.com.au
*.magento.gasnews.com.au
*.wildcard.gasnews.com.au
gayfriends.com.au
*.gayfriends.com.au
*.wildcard.gayfriends.com.au
gayhotel.com.au
*.gayhotel.com.au
*.wildcard.gayhotel.com.au
gaystripper.com.au
*.gaystripper.com.au
*.wildcard.gaystripper.com.au
geekology.au
*.geekology.au
*.random.geekology.au
*.wildcard.geekology.au
gillesvilleneuve.au
*.gillesvilleneuve.au
*.random.gillesvilleneuve.au
*.wildcard.gillesvilleneuve.au
goldpan.com.au
*.goldpan.com.au
*.wildcard.goldpan.com.au
*.dan.gymguide.com.au
gymguide.com.au
*.gymguide.com.au
*.wildcard.gymguide.com.au
Other domains in certificate