76/100 SECURITY SCORE

Certificate Information

Subject
CN=deepbo.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 08, 2026
Valid Until
May 09, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
64:42:B4:19:DE:CA:7A:13:F4:4A:2C:61:95:96:B1:23:FF:F5:D8:B7:0A:76:C5:6A:2C:A0:07:0E:1C:00:BA:57
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
ashvini.com *.ashvini.com *.admin.ashvini.com *.assets.ashvini.com *.auth.ashvini.com *.autodiscover.ashvini.com *.bbs.ashvini.com *.blog.ashvini.com *.comune.ashvini.com *.gitlab.ashvini.com *.hostmaster.ashvini.com *.m.ashvini.com *.mail.ashvini.com *.mail11.ashvini.com *.mailno.ashvini.com *.sitemaps.ashvini.com *.ww25.ashvini.com *.ww5.ashvini.com

Other domains in certificate

10iptv.net *.10iptv.net *.vpn.10iptv.net
1weeklyads.com *.1weeklyads.com *.buy.1weeklyads.com *.coupons.1weeklyads.com
agentsyaml.dev *.agentsyaml.dev *.dashboard.agentsyaml.dev *.dev.agentsyaml.dev *.dgzyydemo.agentsyaml.dev *.qa.agentsyaml.dev *.stg.agentsyaml.dev
bravadoauto.co.uk *.bravadoauto.co.uk
deepbo.com *.deepbo.com *.staging.deepbo.com
god4d.bet *.god4d.bet *.smtp.god4d.bet
*.adguard1.maitreyaradio.org *.app.maitreyaradio.org maitreyaradio.org *.maitreyaradio.org
*.d2jskd249q1c73denma0.newloan.net *.hostmaster.newloan.net *.mx.newloan.net newloan.net *.newloan.net
*.grpuesiracharo.piratebayorg.com piratebayorg.com *.piratebayorg.com *.samutsakhonln.piratebayorg.com *.saraburijb.piratebayorg.com *.satahipho.piratebayorg.com *.sirachate.piratebayorg.com *.thamakawq.piratebayorg.com
*.avoymnobhjadguard01.reactive.faith reactive.faith *.reactive.faith *.resolver.reactive.faith
*.blog.socialchangemedia.com *.hostmaster.socialchangemedia.com *.m.socialchangemedia.com socialchangemedia.com *.socialchangemedia.com
*.marketing.sonitoto.homes *.ns.sonitoto.homes sonitoto.homes *.sonitoto.homes
*.afzkejmh.worldmap.one *.agmvhyks.worldmap.one *.dev.worldmap.one *.f8a01ddc-eb47-49a1-bcc5-2de1bf7cecc7.worldmap.one *.home.worldmap.one *.lgtiemail.worldmap.one *.m.worldmap.one *.vconzehk.worldmap.one *.web.worldmap.one worldmap.one *.worldmap.one
*.barracuda.yaelink.com *.blog.yaelink.com *.pay.yaelink.com *.ticket.yaelink.com *.ww25.yaelink.com yaelink.com *.yaelink.com *.ymcs.yaelink.com