76/100 SECURITY SCORE

Certificate Information

Subject
CN=hukuoka.jp
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 10, 2026
Valid Until
May 11, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
85:BE:D6:21:92:F1:82:71:43:06:17:79:0D:8A:25:8C:DC:35:4A:91:DE:3F:C0:D0:9F:9D:83:53:50:8F:68:91
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
hamptonconservatories.com *.hamptonconservatories.com *.random.hamptonconservatories.com *.ww38.hamptonconservatories.com

Other domains in certificate

155ww8.my *.155ww8.my
86001.pizza *.86001.pizza
bostonknights.com *.bostonknights.com *.www.bostonknights.com
casibomgir.biz *.casibomgir.biz *.www.casibomgir.biz
cheapseniorwheelchairsop.space *.cheapseniorwheelchairsop.space
*.chikushino.hukuoka.jp *.city.hukuoka.jp *.cityyame.hukuoka.jp *.hisayama.hukuoka.jp hukuoka.jp *.hukuoka.jp *.kurume.hukuoka.jp *.pref.hukuoka.jp *.random.hukuoka.jp *.utsu.hukuoka.jp *.wakamiya.hukuoka.jp *.yakamiya.hukuoka.jp *.yame.hukuoka.jp *.yanagawa.hukuoka.jp *.yoshii.hukuoka.jp *.yukuhashi.hukuoka.jp
*.demo.jogn.de jogn.de *.jogn.de
*.access.miciano.com *.apps.miciano.com *.brxodapps.miciano.com *.cloud.miciano.com *.demo.miciano.com *.gateway.miciano.com *.m.miciano.com *.mail.miciano.com miciano.com *.miciano.com *.mkt.miciano.com *.portal.miciano.com *.rds.miciano.com *.rds1.miciano.com *.sitemap.miciano.com *.sms.miciano.com *.transactions.miciano.com *.vpn.miciano.com *.wvoxrgateway.miciano.com *.ww25.miciano.com *.ww5.miciano.com
parkingchargepayments.com *.parkingchargepayments.com
*.ny-feed.rtblmh.com rtblmh.com *.rtblmh.com *.sg-feed.rtblmh.com *.sg-t.rtblmh.com *.t.rtblmh.com
settledowndontsettle.com *.settledowndontsettle.com
*.api.sustainablesn.com *.crm.sustainablesn.com *.demo.sustainablesn.com *.docs.sustainablesn.com *.external.sustainablesn.com *.formation.sustainablesn.com *.my.sustainablesn.com *.myapps2.sustainablesn.com *.portal.sustainablesn.com *.rd.sustainablesn.com *.rds.sustainablesn.com *.remote.sustainablesn.com *.sharepoint.sustainablesn.com *.shop.sustainablesn.com sustainablesn.com *.sustainablesn.com *.templates.sustainablesn.com *.test.sustainablesn.com *.virtualaccess2.sustainablesn.com *.webmail.sustainablesn.com *.www.sustainablesn.com
thechristodesign.com *.thechristodesign.com