Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=buildingdreamspreschool.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 11, 2026
Valid Until
May 12, 2026
80 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5F:8A:AF:C8:5C:05:62:EA:40:E2:6B:CA:D4:89:47:F6:1C:8A:47:20:1F:4E:00:85:41:F3:92:93:D7:5C:9E:13
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
gays3.com
*.gays3.com
*.integration.gays3.com
*.radio.gays3.com
*.vid-7.gays3.com
2031.pl
*.2031.pl
*.account.2031.pl
*.adm.2031.pl
*.admin.2031.pl
*.app.2031.pl
*.autoconfig.2031.pl
*.bbe2059a2d5d.2031.pl
*.client.2031.pl
*.connectvpn.2031.pl
*.cs.2031.pl
*.gateway.2031.pl
*.login.2031.pl
*.m.2031.pl
*.mobile.2031.pl
*.ms1.2031.pl
*.office.2031.pl
*.portal.2031.pl
*.remoteaccess.2031.pl
*.secure.2031.pl
*.smtp2.2031.pl
*.ssl.2031.pl
*.vip.2031.pl
*.vpn1.2031.pl
*.webconnect.2031.pl
*.webmail.2031.pl
*.webvpn.2031.pl
*.ww25.2031.pl
*.ww38.2031.pl
*.azcorrection.azgov.com
azgov.com
*.azgov.com
*.gitlab.azgov.com
*.options.azgov.com
*.prosecution.azgov.com
*.random.azgov.com
*.scotsdale.azgov.com
*.soctsdale.azgov.com
*.ww42.azgov.com
*.api.basdeo.com
basdeo.com
*.basdeo.com
*.dev.basdeo.com
*.diego.basdeo.com
*.test.basdeo.com
*.ww16.basdeo.com
*.ww25.basdeo.com
*.ww38.basdeo.com
*.binaryoptionsquant.buildingdreamspreschool.com
buildingdreamspreschool.com
*.buildingdreamspreschool.com
*.cryptosecretsociety.buildingdreamspreschool.com
*.daystutoring.buildingdreamspreschool.com
*.dividends-ml.buildingdreamspreschool.com
*.eamazonbay.buildingdreamspreschool.com
*.globaljobslist.buildingdreamspreschool.com
*.globalpropertieslist.buildingdreamspreschool.com
*.hurtadolandscaping.buildingdreamspreschool.com
*.jasminedthomas2k.buildingdreamspreschool.com
*.jasminedthomas2k2.buildingdreamspreschool.com
*.masillamedia.buildingdreamspreschool.com
*.readingiseverything-org.buildingdreamspreschool.com
*.readingiseverything1.buildingdreamspreschool.com
*.smartbrainpills.buildingdreamspreschool.com
*.thebestforyourbiz.buildingdreamspreschool.com
*.vegaglobal-us.buildingdreamspreschool.com
*.dev.dissonante.com
dissonante.com
*.dissonante.com
*.rustore.dissonante.com
*.ww16.dissonante.com
*.bbs.preveo.com
*.kjlwnww17.preveo.com
*.mail.preveo.com
*.monitor.preveo.com
*.ns2.preveo.com
*.office.preveo.com
preveo.com
*.preveo.com
*.rss.preveo.com
*.sitemaps.preveo.com
*.usa.preveo.com
*.users.preveo.com
*.ww1.preveo.com
Other domains in certificate