Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=agstore.co
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 24, 2026
Valid Until
August 22, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
83:88:58:A9:83:54:21:78:2F:24:E3:CE:55:1B:5C:4A:39:18:2C:A5:82:D3:20:D3:79:13:D3:F4:31:67:7C:88
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
hct.life
*.hct.life
*.autodiscover.hct.life
*.smartr.hct.life
agstore.co
*.agstore.co
*.random.agstore.co
barbaccia.com
*.barbaccia.com
*.cicd.barbaccia.com
*.dev.barbaccia.com
*.development.barbaccia.com
*.jenkins.barbaccia.com
*.mail.barbaccia.com
*.mail2.barbaccia.com
*.old.barbaccia.com
*.partners.barbaccia.com
*.rss.barbaccia.com
*.rustore.barbaccia.com
*.videos.barbaccia.com
*.wiki.barbaccia.com
*.wp.barbaccia.com
*.ww.barbaccia.com
*.ww1.barbaccia.com
*.ww16.barbaccia.com
botanica.studio
*.botanica.studio
*.deddrop.botanica.studio
*.mspc.botanica.studio
*.picklebeans.botanica.studio
g7ttd4opf3.com
*.g7ttd4opf3.com
*.ll-fr2whq.g7ttd4opf3.com
gluuu.tv
*.gluuu.tv
*.gmfz.gluuu.tv
*.gz.gluuu.tv
*.pub.gluuu.tv
*.smkxxy.gluuu.tv
*.vmspub.gluuu.tv
*.ww25.gluuu.tv
*.www.gluuu.tv
goodmanclub.com
*.goodmanclub.com
inscrevefundatec.com
*.inscrevefundatec.com
*.ww38.inscrevefundatec.com
iptv-online.pro
*.iptv-online.pro
*.jokerapp678d.jokerapp678d.net
jokerapp678d.net
*.jokerapp678d.net
*.website.jokerapp678d.net
*.www.jokerapp678d.net
jppnq.hair
*.jppnq.hair
*.ovtpi2070484.jppnq.hair
*.qjud1870002.jppnq.hair
*.ww25.jppnq.hair
kakek680.com
*.kakek680.com
lamargheritaspizzamenu.com
*.lamargheritaspizzamenu.com
lifegoals.co
*.lifegoals.co
m-contents.info
*.m-contents.info
*.ww1.m-contents.info
mobilechannel.it
*.mobilechannel.it
ourz.de
*.ourz.de
*.pay.platinumcigarmiami.com
platinumcigarmiami.com
*.platinumcigarmiami.com
*.a9c5d8dd-4ec5-4dd9-a0a7-8344f8119eda.rekkerd.com
rekkerd.com
*.rekkerd.com
*.ww1.rekkerd.com
*.ww16.rekkerd.com
*.ww17.rekkerd.com
*.ww25.rekkerd.com
*.ww38.rekkerd.com
*.new.rokeybhai.xyz
rokeybhai.xyz
*.rokeybhai.xyz
schoolsforafrica.org
*.schoolsforafrica.org
vbn88.com
*.vbn88.com
Other domains in certificate