75/100 SECURITY SCORE

Certificate Information

Subject
CN=handbagsandtotes.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026 57 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
9E:E9:E8:2F:1D:20:F8:84:2D:F0:A7:21:7A:0C:3C:EE:BE:6A:41:FA:22:7D:80:DA:79:7A:D9:01:49:9F:DC:53
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
retratarte.com *.retratarte.com *.api.retratarte.com *.erp.retratarte.com *.hostmaster.retratarte.com *.m.retratarte.com *.rdweb.retratarte.com *.sitemap.retratarte.com *.sitemaps.retratarte.com *.ww1.retratarte.com *.ww11.retratarte.com *.ww16.retratarte.com *.ww17.retratarte.com *.ww25.retratarte.com *.ww38.retratarte.com

Other domains in certificate

a1garagedoors.co.uk *.a1garagedoors.co.uk
coogiba.de *.coogiba.de
*.admin.cukarica.com *.crm.cukarica.com cukarica.com *.cukarica.com *.temp.cukarica.com *.ww17.cukarica.com *.www.cukarica.com
diesto.com *.diesto.com
finanzsparen.com *.finanzsparen.com *.news.finanzsparen.com *.ww38.finanzsparen.com
firstchoicekebab.co.uk *.firstchoicekebab.co.uk *.shop.firstchoicekebab.co.uk *.www.firstchoicekebab.co.uk
*.api.goodbenefits.it *.backend.goodbenefits.it goodbenefits.it *.goodbenefits.it *.www.goodbenefits.it
hamsten.com *.hamsten.com
handbagsandtotes.com *.handbagsandtotes.com *.mobi.handbagsandtotes.com *.page.handbagsandtotes.com *.rz.handbagsandtotes.com *.users.handbagsandtotes.com *.videos.handbagsandtotes.com
info-creances.com *.info-creances.com *.r.info-creances.com *.random.info-creances.com *.ww38.info-creances.com
jess.it *.jess.it *.random.jess.it
jkmy2.co *.jkmy2.co
mappasicilia.it *.mappasicilia.it
mdrive.today *.mdrive.today *.ww38.mdrive.today
ogledala.com *.ogledala.com
openkakao.co *.openkakao.co
payoff888.com *.payoff888.com *.ww16.payoff888.com *.ww38.payoff888.com
pozisgreek.com *.pozisgreek.com
*.beacon.pq.com.au pq.com.au *.pq.com.au
quintuplets.com.au *.quintuplets.com.au
tamilyogi.cloud *.tamilyogi.cloud *.ww1.tamilyogi.cloud
ttqudetibt.net *.ttqudetibt.net
xnxxed.com *.xnxxed.com
*.sitemap.zdravfilt.click zdravfilt.click *.zdravfilt.click