75/100 SECURITY SCORE

Certificate Information

Subject
CN=gxpz.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 22, 2026
Valid Until
December 21, 2026 64 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
28:CE:5F:C3:C1:1D:0F:63:6A:2C:64:A0:80:55:70:3F:36:4C:03:C6:D0:1B:2F:42:69:A6:BD:AB:84:54:8D:B2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
icg-lanarkshire2011.com *.icg-lanarkshire2011.com *.app.icg-lanarkshire2011.com *.blog.icg-lanarkshire2011.com *.customers.icg-lanarkshire2011.com *.download.icg-lanarkshire2011.com *.events.icg-lanarkshire2011.com *.imap3d.icg-lanarkshire2011.com *.owa.icg-lanarkshire2011.com *.postgresql.icg-lanarkshire2011.com *.pub.icg-lanarkshire2011.com *.registration.icg-lanarkshire2011.com *.research.icg-lanarkshire2011.com *.router.icg-lanarkshire2011.com *.ssh.icg-lanarkshire2011.com *.ssl.icg-lanarkshire2011.com *.vpn1.icg-lanarkshire2011.com *.ww01.icg-lanarkshire2011.com *.www02.icg-lanarkshire2011.com

Other domains in certificate

*.analytics.downtown.events *.apps.downtown.events *.cincicnnati.downtown.events *.city.downtown.events downtown.events *.downtown.events *.ferndale.downtown.events *.gateway.downtown.events *.intranet.downtown.events *.kcmo.downtown.events *.lexington.downtown.events *.mckinney.downtown.events *.missoula.downtown.events *.pleasanton.downtown.events *.store.downtown.events *.tampa.downtown.events *.toledo.downtown.events
drawml.pro *.drawml.pro *.staging.drawml.pro *.www.drawml.pro
*.admin.gxpz.com *.api.gxpz.com *.assets.gxpz.com *.blog.gxpz.com *.comwww.gxpz.com *.demo.gxpz.com *.dev.gxpz.com *.eb.gxpz.com *.fywyt.gxpz.com gxpz.com *.gxpz.com *.hostmaster.gxpz.com *.j.gxpz.com *.m.gxpz.com *.mail8.gxpz.com *.out.gxpz.com *.shop.gxpz.com *.test.gxpz.com *.ww1.gxpz.com *.ww11.gxpz.com *.ww16.gxpz.com *.ww17.gxpz.com *.ww38.gxpz.com *.wxh.gxpz.com
*.account.hvattorney.info *.adm.hvattorney.info *.admin.hvattorney.info *.app.hvattorney.info *.backend.hvattorney.info *.backup.hvattorney.info *.bu1avk.hvattorney.info *.cms.hvattorney.info *.edu.hvattorney.info *.git.hvattorney.info *.gitlab.hvattorney.info hvattorney.info *.hvattorney.info *.marketing.hvattorney.info *.secure.hvattorney.info *.testing.hvattorney.info *.uat.hvattorney.info *.v1.hvattorney.info *.v2.hvattorney.info *.web.hvattorney.info
*.card.itau30hr.info *.cliente.itau30hr.info itau30hr.info *.itau30hr.info *.kafka-ui.itau30hr.info *.maps.itau30hr.info