Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=billboardsignage.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 16, 2026
Valid Until
August 14, 2026 76 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F6:0A:16:53:1F:87:D7:34:51:82:1F:CB:72:92:E5:69:7A:C3:82:A1:79:37:29:34:A2:78:45:14:23:F3:3F:7E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
gcalliance.io *.gcalliance.io *.crm-insight.gcalliance.io *.ns1.gcalliance.io

Other domains in certificate

*.41oa9c.artmarketmagazine.com artmarketmagazine.com *.artmarketmagazine.com *.hostmaster.artmarketmagazine.com
*.banking.bgbw-online.info bgbw-online.info *.bgbw-online.info *.home.bgbw-online.info
billboardsignage.com *.billboardsignage.com
but.com.au *.but.com.au *.comune.but.com.au *.ww25.but.com.au
celebrityauction.com *.celebrityauction.com *.ww38.celebrityauction.com
ddcsp-umich.com *.ddcsp-umich.com *.nsk.ddcsp-umich.com *.random.ddcsp-umich.com *.ww25.ddcsp-umich.com
dietarysupplement.au *.dietarysupplement.au *.ww17.dietarysupplement.au
*.comune.egos.com.au *.donate.egos.com.au egos.com.au *.egos.com.au *.random.egos.com.au
gantrycrane.net *.gantrycrane.net *.ww25.gantrycrane.net
heatandairinfo.com *.heatandairinfo.com
*.admin.iemp.com *.dddd.iemp.com iemp.com *.iemp.com *.ns2.iemp.com *.pilsnet.iemp.com *.website.iemp.com
ozhoroscope.com.au *.ozhoroscope.com.au *.random.ozhoroscope.com.au *.www.ozhoroscope.com.au
quantumholographic.com *.quantumholographic.com
restaurantlasource.net *.restaurantlasource.net *.ww17.restaurantlasource.net
*.cloud.sayhold.com *.lime.sayhold.com *.rd.sayhold.com *.rds.sayhold.com *.rdweb.sayhold.com *.remote.sayhold.com sayhold.com *.sayhold.com *.sitemap.sayhold.com *.sitemaps.sayhold.com
*.n26.startrekuk.com startrekuk.com *.startrekuk.com *.ww25.startrekuk.com *.ww38.startrekuk.com
thinksquare.au *.thinksquare.au *.ww17.thinksquare.au
*.co.tourtheisrael.com tourtheisrael.com *.tourtheisrael.com
*.jj05ms.usedataatlascore.pro usedataatlascore.pro *.usedataatlascore.pro
*.cotton.vivestory.shop *.offer.vivestory.shop vivestory.shop *.vivestory.shop
wetteronliune.de *.wetteronliune.de
*.ww38.yuobute.de *.www.yuobute.de yuobute.de *.yuobute.de