76/100 SECURITY SCORE

Certificate Information

Subject
CN=homeownerresources.co
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 13, 2026
Valid Until
September 11, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4C:F5:0D:27:C6:9F:52:EF:4D:9C:11:51:3C:F4:DF:75:06:20:BF:DC:7E:64:36:26:2F:B8:A0:19:A3:98:BB:0E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
venya.it *.venya.it *.hostmaster.venya.it *.mx.venya.it

Other domains in certificate

*.1.celeron.it *.103.celeron.it *.143.celeron.it *.232.celeron.it *.b1.celeron.it *.cache.celeron.it celeron.it *.celeron.it *.d3.celeron.it *.dash.celeron.it *.db2.celeron.it *.dev.celeron.it *.global.celeron.it *.health.celeron.it *.hostmaster.celeron.it *.irc.celeron.it *.notexistsm1.celeron.it *.p.celeron.it *.phoenix.celeron.it *.reporting.celeron.it *.s5.celeron.it *.us.celeron.it
*.admin.confirm.chat *.api.confirm.chat *.app.confirm.chat *.bce7216c-8122-4e9e-bd7a-ec5e1b3df352.confirm.chat confirm.chat *.confirm.chat *.dev.confirm.chat *.m.confirm.chat *.shop.confirm.chat *.staging.confirm.chat *.test.confirm.chat *.up.confirm.chat *.www.confirm.chat *.ygyvhpgppcm.confirm.chat
dewi-778.online *.dewi-778.online *.rr6o7e.dewi-778.online
*.api.dexcpu.com *.dev.dexcpu.com dexcpu.com *.dexcpu.com *.portal.dexcpu.com *.secure.dexcpu.com *.sitemaps.dexcpu.com
*.emv1.homeownerresources.co *.gitlab.homeownerresources.co homeownerresources.co *.homeownerresources.co *.hostmaster.homeownerresources.co *.mailgw.homeownerresources.co *.pop.homeownerresources.co
*.aging.importantfish.club *.api.importantfish.club *.app.importantfish.club *.demo.importantfish.club *.dev.importantfish.club importantfish.club *.importantfish.club *.p2pmop.importantfish.club *.staging.importantfish.club *.test.importantfish.club *.w.importantfish.club
*.mail.marfamotel.com marfamotel.com *.marfamotel.com
*.content2.pollystreaming.com *.content4.pollystreaming.com *.donate.pollystreaming.com *.ns20.pollystreaming.com pollystreaming.com *.pollystreaming.com *.ww25.pollystreaming.com
*.cloud.xn--vctp11e.com *.m.xn--vctp11e.com *.mod.xn--vctp11e.com *.rd.xn--vctp11e.com *.rds.xn--vctp11e.com *.rdweb.xn--vctp11e.com *.sitemap.xn--vctp11e.com *.sitemaps.xn--vctp11e.com *.wildcard.xn--vctp11e.com xn--vctp11e.com *.xn--vctp11e.com