76/100 SECURITY SCORE

Certificate Information

Subject
CN=9apps.mobi
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 17, 2026
Valid Until
May 18, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FB:86:A7:2A:CC:47:1E:35:30:79:10:2B:0C:BC:5D:DC:02:51:75:DB:D2:1B:38:17:E8:A9:97:50:B0:5E:0D:F2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
magicberry.com *.magicberry.com *.access.magicberry.com *.app.magicberry.com *.desktop.magicberry.com *.e00109a9-29e3-4ac6-90e6-ae5fe0f2e265.magicberry.com *.gateway.magicberry.com *.gp.magicberry.com *.hostmaster.magicberry.com *.m.magicberry.com *.magento.magicberry.com *.pipeline.magicberry.com *.portal.magicberry.com *.ra.magicberry.com *.rd.magicberry.com *.rdp.magicberry.com *.rds.magicberry.com *.rdweb.magicberry.com *.remote.magicberry.com *.remoteapp.magicberry.com *.remoto.magicberry.com *.secure.magicberry.com *.ssl.magicberry.com *.sslvpn.magicberry.com *.ts.magicberry.com *.vdi.magicberry.com *.vpn2.magicberry.com *.vpnssl.magicberry.com *.webvpn.magicberry.com *.ww1.magicberry.com *.ww17.magicberry.com *.ww38.magicberry.com *.ww41.magicberry.com *.www2.magicberry.com

Other domains in certificate

9apps.mobi *.9apps.mobi *.down.9apps.mobi *.email.9apps.mobi *.imap-mail.9apps.mobi *.imap.9apps.mobi *.intelligence.9apps.mobi *.report.9apps.mobi *.securemail.9apps.mobi *.ucdns.9apps.mobi *.webmail.9apps.mobi *.zm.9apps.mobi
*.97d0b311-605b-431f-ac29-24bc7ffe73cf.blabber.tube *.acmksdev.blabber.tube *.ad.blabber.tube *.adguard.blabber.tube *.adguard01.blabber.tube *.adguard1.blabber.tube *.agh.blabber.tube *.app.blabber.tube *.autoconfig.blabber.tube *.backend.blabber.tube blabber.tube *.blabber.tube *.d0a5398c-9b01-4cac-b4b7-dd831896b56a.blabber.tube *.dev.blabber.tube *.dns.blabber.tube *.dns1.blabber.tube *.doh1.blabber.tube *.hawhdresolver1.blabber.tube *.m.blabber.tube *.mail.blabber.tube *.metrics.blabber.tube *.ns.blabber.tube *.resolver1.blabber.tube *.staging.blabber.tube *.wkgsoadmin.blabber.tube
*.1.yeyovalium.net *.admin.yeyovalium.net *.gateway.yeyovalium.net *.m.yeyovalium.net *.mobile.yeyovalium.net *.mx-1.yeyovalium.net *.pop.yeyovalium.net *.portal.yeyovalium.net *.secure.yeyovalium.net *.sitemap.yeyovalium.net *.ssl.yeyovalium.net *.sslvpn.yeyovalium.net *.vpn.yeyovalium.net *.vpn2.yeyovalium.net *.ww1.yeyovalium.net *.www.yeyovalium.net yeyovalium.net *.yeyovalium.net