76/100 SECURITY SCORE

Certificate Information

Subject
CN=enchantingtravelfinds.xyz
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
March 07, 2026
Valid Until
June 05, 2026 53 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7F:D8:3C:14:21:6F:68:77:EE:18:20:55:90:17:D5:19:3D:E9:95:57:EA:DD:3C:4B:68:1D:CB:55:46:6F:19:80
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
growrx.icu *.growrx.icu *.email.growrx.icu

Other domains in certificate

conient.icu *.conient.icu
conversiiion.click *.conversiiion.click
coron.icu *.coron.icu
denverbrow.llc *.denverbrow.llc
dreamgardenprojects.xyz *.dreamgardenprojects.xyz
drugproblems.org *.drugproblems.org
ecoserenity.blog *.ecoserenity.blog
electrozouine.com *.electrozouine.com
emanl.click *.emanl.click
ember-flux.quest *.ember-flux.quest
ember-nectar.best *.ember-nectar.best
emberarcane.best *.emberarcane.best
empoweredperksprogram.com *.empoweredperksprogram.com
emrmwcsg.com *.emrmwcsg.com
emtail.xyz *.emtail.xyz
emwil.digital *.emwil.digital
en-icloudsupport.info *.en-icloudsupport.info
enchantedweddingdiaries.beauty *.enchantedweddingdiaries.beauty
enchantingtravelfinds.xyz *.enchantingtravelfinds.xyz
enchantingweddingsstories.beauty *.enchantingweddingsstories.beauty
encryptpro.click *.encryptpro.click
energieclothing.shop *.energieclothing.shop
energizedpaks.com *.energizedpaks.com
energyfitnessboost.club *.energyfitnessboost.club
energyhuge.com *.energyhuge.com
engagingtraveltrails.xyz *.engagingtraveltrails.xyz
enthrallingtravelquests.xyz *.enthrallingtravelquests.xyz
ethicaltravelchoices.xyz *.ethicaltravelchoices.xyz
evergreengardeningtips.xyz *.evergreengardeningtips.xyz
everybodylikesme.com *.everybodylikesme.com
firstchoicemart.shop *.firstchoicemart.shop
fitnessglowjourney.run *.fitnessglowjourney.run
fitnessmindfulmap.run *.fitnessmindfulmap.run
fitnesspowertribe.run *.fitnesspowertribe.run
fitnesssavvyguide.run *.fitnesssavvyguide.run
fitnessworldhub.run *.fitnessworldhub.run
flexiblebuy.shop *.flexiblebuy.shop
gameads.click *.gameads.click
gamehit.click *.gamehit.click
gardencarejourney.xyz *.gardencarejourney.xyz
gardeningblissfulnights.xyz *.gardeningblissfulnights.xyz
gardeningforallseasons.live *.gardeningforallseasons.live
xpc38.icu *.xpc38.icu