76/100 SECURITY SCORE

Certificate Information

Subject
CN=bushlink.com.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 23, 2026
Valid Until
July 22, 2026 58 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F6:91:4B:B7:E3:55:2C:C6:81:6E:2F:0B:31:65:81:19:11:F9:68:DF:E6:DC:9E:66:3C:2F:5F:CB:5E:AB:A6:53
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
outylook.com *.outylook.com *.bi.outylook.com *.comww25.outylook.com *.development.outylook.com *.help.outylook.com *.hr.outylook.com *.mail.outylook.com *.origin.outylook.com *.protection.outylook.com *.random.outylook.com *.superset.outylook.com *.users.outylook.com *.ww25.outylook.com

Other domains in certificate

atlantafalcon.com *.atlantafalcon.com
*.4k.boutv.net *.7tv.boutv.net *.8k.boutv.net boutv.net *.boutv.net *.detv.boutv.net *.estv.boutv.net *.frtv.boutv.net *.stream.boutv.net *.tv-fullmovie.boutv.net *.ww38.boutv.net *.yt-tv.boutv.net
bushlink.com.au *.bushlink.com.au *.insights.bushlink.com.au *.preprod.bushlink.com.au *.ww25.bushlink.com.au
centerpoitenergy.com *.centerpoitenergy.com *.dns.centerpoitenergy.com *.hermes.centerpoitenergy.com *.hostmaster.centerpoitenergy.com *.mx7.centerpoitenergy.com *.random.centerpoitenergy.com *.ww38.centerpoitenergy.com
collegehumor.au *.collegehumor.au *.ww25.collegehumor.au
itrecruitment.au *.itrecruitment.au
*.admin.keralamessex.co.uk keralamessex.co.uk *.keralamessex.co.uk *.random.keralamessex.co.uk
*.ca.lriz.com lriz.com *.lriz.com *.ns3.lriz.com
massagers.com.au *.massagers.com.au *.random.massagers.com.au *.ww25.massagers.com.au
*.analyze.rafal.it *.app.rafal.it *.data.rafal.it *.demo.rafal.it *.dev.rafal.it *.intel.rafal.it *.mail.rafal.it *.mail2.rafal.it rafal.it *.rafal.it
*.asa.sh-aloka.com *.ciscoasa.sh-aloka.com *.cloud.sh-aloka.com *.exchange.sh-aloka.com *.m.sh-aloka.com *.mail.sh-aloka.com *.officevpn.sh-aloka.com *.owa.sh-aloka.com *.portal.sh-aloka.com *.ra.sh-aloka.com *.remote.sh-aloka.com sh-aloka.com *.sh-aloka.com
surkshark.com *.surkshark.com
*.mx7.vacatiomstogo.com vacatiomstogo.com *.vacatiomstogo.com
videoefects.com *.videoefects.com *.ww25.videoefects.com