76/100 SECURITY SCORE

Certificate Information

Subject
CN=infurion.store
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 04, 2026
Valid Until
May 05, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:80:F0:CA:3D:0A:2A:69:32:12:B6:67:0D:73:C0:B1:13:A7:61:79:E4:41:B4:23:56:B3:03:73:63:ED:C4:89
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
amgfast.com *.amgfast.com *.demo.amgfast.com

Other domains in certificate

10sports.live *.10sports.live *.api.10sports.live *.app.10sports.live *.intranet.10sports.live *.ww25.10sports.live
alternativnamedicina.sk *.alternativnamedicina.sk
amglinkup.com *.amglinkup.com *.demo.amglinkup.com
*.1sutop.atakumnumberescort.xyz atakumnumberescort.xyz *.atakumnumberescort.xyz
bigbug.studio *.bigbug.studio *.ww25.bigbug.studio
donatella.store *.donatella.store *.ww25.donatella.store
eurostyletuning.com.au *.eurostyletuning.com.au *.uk.eurostyletuning.com.au
*.api.expres.click *.app.expres.click *.chart.expres.click *.dwwjxs10ovccsvw2.expres.click expres.click *.expres.click *.insights.expres.click *.random.expres.click *.wildcard.expres.click *.ww16.expres.click *.ww25.expres.click *.ww38.expres.click *.ww6.expres.click *.www.expres.click
fortinet-network-854419014.click *.fortinet-network-854419014.click
furness.au *.furness.au
grouplionsgate.com *.grouplionsgate.com *.random.grouplionsgate.com
*.8joac.hgzy.xyz *.aqzmk.hgzy.xyz hgzy.xyz *.hgzy.xyz
housingfound.online *.housingfound.online *.zrbnnww25.housingfound.online
infurion.store *.infurion.store
k8cc.one *.k8cc.one
markethillelim.online *.markethillelim.online
meganvo.com *.meganvo.com *.web.meganvo.com
*.airtemp.o2.net.au *.cms.o2.net.au *.craigieburnclinic.o2.net.au *.design.o2.net.au *.intouchict.o2.net.au *.intouchict1.o2.net.au *.mepolo.o2.net.au *.mp3.o2.net.au o2.net.au *.o2.net.au *.stay-competitive.o2.net.au *.swiss-military.o2.net.au *.tecnova.o2.net.au *.telco360.o2.net.au *.ww25.o2.net.au *.yesndis.o2.net.au
*.comune.outdoorcampingdirect.co.uk outdoorcampingdirect.co.uk *.outdoorcampingdirect.co.uk
superburger-ka.de *.superburger-ka.de
videospokesmodel.com *.videospokesmodel.com *.ww16.videospokesmodel.com
*.ww12.xbtccapex.club xbtccapex.club *.xbtccapex.club