76/100 SECURITY SCORE

Certificate Information

Subject
CN=888b8.win
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 13, 2026
Valid Until
May 14, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
37:01:65:3F:48:C1:36:63:47:53:32:31:3A:69:BB:A9:6C:20:04:E8:A9:B6:F9:D3:55:B7:DA:D1:B7:8A:63:37
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
mosotho.com *.mosotho.com *.hostmaster.mosotho.com *.mail.mosotho.com *.wiki.mosotho.com *.wildcard.mosotho.com *.ww1.mosotho.com *.ww11.mosotho.com *.ww16.mosotho.com *.ww25.mosotho.com

Other domains in certificate

888b8.win *.888b8.win *.sitemaps.888b8.win
asia77.page *.asia77.page *.hostmaster.asia77.page
californiamobileiv.com *.californiamobileiv.com *.www.californiamobileiv.com
*.1.cubanculturalheritage.org *.53.cubanculturalheritage.org *.admin.cubanculturalheritage.org *.api.cubanculturalheritage.org *.app.cubanculturalheritage.org cubanculturalheritage.org *.cubanculturalheritage.org *.gowww.cubanculturalheritage.org *.hostmaster.cubanculturalheritage.org *.m.cubanculturalheritage.org *.new.cubanculturalheritage.org *.rd.cubanculturalheritage.org *.rds.cubanculturalheritage.org *.rdweb.cubanculturalheritage.org *.remote.cubanculturalheritage.org *.test.cubanculturalheritage.org *.vpn.cubanculturalheritage.org *.w1.cubanculturalheritage.org *.webmail.cubanculturalheritage.org *.wtpfp1.cubanculturalheritage.org *.www.cubanculturalheritage.org *.wwww.cubanculturalheritage.org
*.api.erlebnisse.com *.blog.erlebnisse.com *.dev.erlebnisse.com erlebnisse.com *.erlebnisse.com *.hostmaster.erlebnisse.com *.mail.erlebnisse.com *.mail2.erlebnisse.com *.test.erlebnisse.com *.ww11.erlebnisse.com *.ww16.erlebnisse.com *.ww25.erlebnisse.com
*.cpcalendars.faepac.org faepac.org *.faepac.org *.ftp.faepac.org *.redash.faepac.org *.staging.faepac.org *.superset.faepac.org
goshopfvp.com *.goshopfvp.com *.ww25.goshopfvp.com
izzikz47.com *.izzikz47.com *.sitemap.izzikz47.com
jpages.eu *.jpages.eu *.mail.jpages.eu
kompania1794.eu *.kompania1794.eu
*.a9800e04-74ee-479a-93a2-dcb21712f53e.maheswari.com *.access.maheswari.com *.api.maheswari.com *.m.maheswari.com maheswari.com *.maheswari.com *.portal.maheswari.com *.rds.maheswari.com *.ts.maheswari.com
moo-yar.com *.moo-yar.com
*.admin.msmotorsonline.co.uk msmotorsonline.co.uk *.msmotorsonline.co.uk *.ww25.msmotorsonline.co.uk
pompa138suzuki.com *.pompa138suzuki.com *.www.pompa138suzuki.com