75/100 SECURITY SCORE

Certificate Information

Subject
CN=nageso27.cc
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 01, 2026
Valid Until
December 30, 2026 73 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
56:3D:EB:73:B1:3A:54:E9:DF:A8:0C:78:D9:73:A3:49:17:6F:6E:EA:C4:20:9F:F5:E1:D1:25:BF:6F:C9:EB:21
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
tohmail.com *.tohmail.com *.dddd.tohmail.com *.gateway.tohmail.com

Other domains in certificate

cataatanh.shop *.cataatanh.shop
*.4265d7cd-fbe2-4ae6-a4c2-714a95977ab8.karieralidl.cz *.8e80efbf-eac9-47a5-86a2-863fb57c3847.karieralidl.cz *.cz.karieralidl.cz *.ebmail.karieralidl.cz karieralidl.cz *.karieralidl.cz *.m.karieralidl.cz *.testing.karieralidl.cz *.webmail.karieralidl.cz *.www.karieralidl.cz *.yarefebmail.karieralidl.cz
*.36.nageso27.cc *.3ag.nageso27.cc *.4dq.nageso27.cc *.4uqt.nageso27.cc *.4wtq.nageso27.cc *.5bk.nageso27.cc *.7um.nageso27.cc *.8bk.nageso27.cc *.8hnx.nageso27.cc *.a53r.nageso27.cc *.a8q.nageso27.cc *.ah.nageso27.cc *.aj3.nageso27.cc *.bie.nageso27.cc *.boe.nageso27.cc *.bvb.nageso27.cc *.fid.nageso27.cc *.hch.nageso27.cc *.imc1.nageso27.cc *.jtou.nageso27.cc *.kxu4.nageso27.cc *.la.nageso27.cc *.lx.nageso27.cc nageso27.cc *.nageso27.cc *.pw9.nageso27.cc *.v9pi.nageso27.cc *.vjwc.nageso27.cc *.vpb.nageso27.cc *.xn--1cts3f.nageso27.cc *.zxz.nageso27.cc
*.8f1bdee2-2e23-46f1-8bc9-5687dcb9e06d.qcvod.cc *.access.qcvod.cc *.admin.qcvod.cc *.desktop.qcvod.cc *.ff99900a-98ea-46cf-a71e-95136159b382.qcvod.cc *.gp.qcvod.cc *.m.qcvod.cc *.prod.qcvod.cc *.qa.qcvod.cc qcvod.cc *.qcvod.cc *.rdp.qcvod.cc *.rds.qcvod.cc *.rdweb.qcvod.cc *.remote.qcvod.cc *.remoteapp.qcvod.cc *.remoto.qcvod.cc *.secure.qcvod.cc *.sitemap.qcvod.cc *.sitemaps.qcvod.cc *.ssl.qcvod.cc *.vdi.qcvod.cc *.webvpn.qcvod.cc *.wildcard.qcvod.cc *.ww1.qcvod.cc *.ww25.qcvod.cc *.ww3.qcvod.cc *.ww38.qcvod.cc
*.3975b3a8-9a1a-4851-b510-48dedcd49622.selenefinance.co *.4906a980-b481-494f-8656-9808d300bfec.selenefinance.co *.5c40d0a6-c7c6-4b17-96a9-17fe4776295d.selenefinance.co *.8dcbe909-f500-4530-9821-e79e56b35d4a.selenefinance.co *.m.selenefinance.co *.mail.selenefinance.co *.owa.selenefinance.co selenefinance.co *.selenefinance.co *.smtp.selenefinance.co *.toaplwebmail.selenefinance.co *.webmail.selenefinance.co *.www.selenefinance.co *.zimbra.selenefinance.co