78/100 SECURITY SCORE

Certificate Information

Subject
CN=cheappharmacy.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 24, 2026
Valid Until
January 22, 2027 81 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
46:EA:6D:0A:56:10:B6:98:9B:60:BE:82:09:F1:0F:3B:89:41:23:D7:3D:C2:EB:CD:8F:B1:0A:53:9C:77:B8:67
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

75 domains
cheappharmacy.com *.cheappharmacy.com *.freeshipping.cheappharmacy.com *.ww1.cheappharmacy.com *.ww16.cheappharmacy.com *.ww38.cheappharmacy.com

Other domains in certificate

carpetbagger.uk *.carpetbagger.uk *.ww38.carpetbagger.uk
*.admin.cineonline.me *.api.cineonline.me cineonline.me *.cineonline.me *.hostmaster.cineonline.me *.intranet.cineonline.me *.order.cineonline.me *.random.cineonline.me *.secure.cineonline.me *.shop.cineonline.me *.store.cineonline.me *.ww01.cineonline.me *.ww1.cineonline.me *.ww25.cineonline.me *.ww38.cineonline.me *.ww7.cineonline.me *.www.cineonline.me
*.app.coastosoyooshotel.com coastosoyooshotel.com *.coastosoyooshotel.com *.ww16.coastosoyooshotel.com *.ww17.coastosoyooshotel.com *.ww25.coastosoyooshotel.com *.ww38.coastosoyooshotel.com
degourdir.com *.degourdir.com *.www.degourdir.com
*.com.evsmarket.com evsmarket.com *.evsmarket.com
*.bbs.fourpointsrvservicesaz.com *.blog.fourpointsrvservicesaz.com *.campaign.fourpointsrvservicesaz.com fourpointsrvservicesaz.com *.fourpointsrvservicesaz.com *.jobs.fourpointsrvservicesaz.com *.origin.fourpointsrvservicesaz.com *.pipeline.fourpointsrvservicesaz.com *.ww17.fourpointsrvservicesaz.com *.ww38.fourpointsrvservicesaz.com
kidz.social *.kidz.social *.v1.kidz.social
libertyreserve.us *.libertyreserve.us *.owa.libertyreserve.us *.www.libertyreserve.us
m-educate.com *.m-educate.com *.mail.m-educate.com *.mx7.m-educate.com
mustsell.it *.mustsell.it *.owa.mustsell.it *.random.mustsell.it *.remote.mustsell.it
*.m.newypaip.xyz newypaip.xyz *.newypaip.xyz
orgmovie.com *.orgmovie.com *.prod.orgmovie.com *.ww16.orgmovie.com
seefrench.pro *.seefrench.pro *.ww25.seefrench.pro