SSL Certificate Analysis for holarctic.com - Security Grade & TLS Configuration

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=942ylxx301.top

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

February 18, 2026

Valid Until

May 19, 2026 87 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

6D:FD:46:40:23:A5:A3:6F:1E:8F:46:87:2F:FF:A0:FC:12:57:61:7A:A3:B5:77:EF:DC:95:3A:0F:59:63:02:D1

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin

Permissions-Policy

Present

geolocation=(), midi=(), sync-xhr=(); +6 more

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

holarctic.com *.holarctic.com

Other domains in certificate

*.403363d9f12f1189c6501ba0f99fb8bc.942ylxx301.top 942ylxx301.top *.942ylxx301.top

aquani.com *.aquani.com *.hostmaster.aquani.com *.ww1.aquani.com

championspath.io *.championspath.io *.random.championspath.io *.ww25.championspath.io

exe.net.au *.exe.net.au *.okizeme.exe.net.au *.vincenzosaquatics.exe.net.au *.ww25.exe.net.au *.ww38.exe.net.au

fedorchuklina.info *.fedorchuklina.info *.ww25.fedorchuklina.info

*.access.georgios.net *.apps.georgios.net *.cloud.georgios.net *.comune.georgios.net *.crm.georgios.net georgios.net *.georgios.net *.home.georgios.net *.hostmaster.georgios.net *.imap.georgios.net *.mail.georgios.net *.mailer.georgios.net *.mailhost.georgios.net *.mx4.georgios.net *.owa.georgios.net *.poczta.georgios.net *.portal.georgios.net *.rdp.georgios.net *.rds1.georgios.net *.rdweb.georgios.net *.remoteaccess.georgios.net *.root.georgios.net *.smtp1.georgios.net *.smtp3.georgios.net *.sniper.georgios.net *.web.georgios.net *.webmail.georgios.net *.ww1.georgios.net *.ww17.georgios.net *.ww25.georgios.net *.ww38.georgios.net *.ww5.georgios.net

*.api.gnomadic.com *.beta.gnomadic.com *.dev.gnomadic.com gnomadic.com *.gnomadic.com *.mail.gnomadic.com *.sitemap.gnomadic.com *.test.gnomadic.com *.ww1.gnomadic.com

*.8joac.googl-d3vxxx.xyz googl-d3vxxx.xyz *.googl-d3vxxx.xyz

nhahangvietxua.com *.nhahangvietxua.com *.ww25.nhahangvietxua.com *.ww38.nhahangvietxua.com

ovulationcalender.com.au *.ovulationcalender.com.au *.random.ovulationcalender.com.au

*.agent.red88.works red88.works *.red88.works

*.app.strin.com *.chat.strin.com *.hostmaster.strin.com *.mails.strin.com strin.com *.strin.com *.temp.strin.com *.ww25.strin.com

webstuauntstore.com *.webstuauntstore.com

*.ww17.ylitornio.com *.ww25.ylitornio.com ylitornio.com *.ylitornio.com