Open
Cached
·
just now
95/100
SECURITY SCORE
Certificate Information
Subject
CN=admin-help.blackpearlmail.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 26, 2026
Valid Until
April 26, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0A:4F:7C:C3:55:A1:7A:AF:83:20:BA:82:17:2E:62:C9:5F:07:14:D6:96:97:4C:0F:82:82:BD:F8:9A:DB:DB:35
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=63072000;includeSubDomains
Content-Security-Policy
Basic
script-src; object-src; base-uri; +1 more
script-src 'self' 'strict-dynamic' static.zohocdn.com salesiq.zoho.com dtzpfzv31buvf.cloudfront.net cdn.pagesense.io js.zohocdn.com widgets.zohosalesiq.com zohotagmanager.cdn.pagesense.io 'nonce-186eb7a86f6f0a08a5793763f3653894';object-src 'none';base-uri 'self' static.zohocdn.com;report-uri https://logsapi.zoho.com/csplog?service=support;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(), ambient-light-sensor=(), bluetooth=(), compute-pressure=(), document-domain=(), encrypted-media=(), gamepad=(), gyroscope=(), hid=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), speaker-selection=(), usb=(), xr-spatial-tracking=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 4 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
63 domains
heritage.allthingsvault.com
northshore.allthingsvault.com
onpointe.allthingsvault.com
southland.allthingsvault.com
success.1stavenuecrm.com
support.access-networks.co.nz
helpdesk.adviacent.com
help.astrialearning.com
support.bitsolutions.com.au
admin-help.blackpearlmail.com
insights-help.blackpearlmail.com
help.blive.nyc
usuarios.canarydoctor.com
helpdesk.vibrantgraphics.co.ke
support.collecto.ca
support.cooltrax.com
support.draymaster.com
support.encirrus.com
kb.fishwise.org
260dc.gestionhb.com
7236m.gestionhb.com
7250m.gestionhb.com
7262m.gestionhb.com
help.getnexx.com
help.gofullframe.com
soporte-demo-4.got-ideas.mx
help.greenseal.org
support.hlcextranet.com
mijnhelpdesk.htjz.nl
support.inspirenw.com
support.iot-konnect.net
help.loquantur.com
support.marketingbroker.com.au
facilities.metasource.com
support.mladen-svraka.hr
suporte.neocharge.com.br
support.nexogy.com
support.noggin.ai
support.nowoptics.com
support.numerica.com.co
support.pkftexas.com
support.plumgroveinc.com
help.positivepc.com
destek.propars.net
support.prosolic.nl
support.psfltd.com
helpdesk.redarak.com
sesmaintenance.sabis.net
talentacquisition.sabis.net
support.seattlelab.com
support-intl.shijigroup.com
support.simplewan.com
support.subpod.com
helpdesk.summitinternet.com.au
support.svetek.com
soporte.teki.com.co
support.transfreight.com.au
helpdesk.universalit.co.za
support.digitalfuture.us.com
support.voicebootcamp.com
support.waterfordtechnologies.com
support.wellmonitor.net
support.zest-haccp.com
Other domains in certificate