75/100 SECURITY SCORE

Certificate Information

Subject
CN=supplementyourincome.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 24, 2026
Valid Until
December 23, 2026 74 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
5B:D2:45:E0:4B:E2:AE:9A:6F:C8:28:51:DE:73:90:E9:67:12:CE:9D:3E:57:8C:1A:C7:D4:C7:76:0E:7E:B0:49
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
infraenterprise.click *.infraenterprise.click

Other domains in certificate

hypicdownload.com *.hypicdownload.com
3d5736c8-2f37-4f50-8029-89b748a93c8b.kurnell.au acbcb724-47b0-4426-a54b-b04663a45109.kurnell.au dcdccb20-9696-4ada-b049-73bc6cf44160.kurnell.au emv1.kurnell.au kurnell.au sh.kurnell.au signup.kurnell.au www.kurnell.au
*.135ced69b403dae903970015ad51820c.lesbians.com.au *.8f94100b394bb39ad4405fe3f2c671ff.lesbians.com.au *.a7d45216b18cba3567c2a43732a2b389.lesbians.com.au *.free.lesbians.com.au lesbians.com.au *.lesbians.com.au *.random.lesbians.com.au
*.7bc8532e-6a20-431e-bd56-fac665d92788.marketanalysis.com.au *.a9e7bd13-0862-4f7e-bb2e-cf52ebc41017.marketanalysis.com.au *.forum.marketanalysis.com.au marketanalysis.com.au *.marketanalysis.com.au *.ww.marketanalysis.com.au *.ww41.marketanalysis.com.au
12327a98-808f-439f-a91a-2c007ceeb23f.melbournefitouts.au app.melbournefitouts.au b131379f-4cb0-453c-8f45-c710f2de2170.melbournefitouts.au b7c38468-9360-4872-905a-66879ddb1e21.melbournefitouts.au billing.melbournefitouts.au emv1.melbournefitouts.au melbournefitouts.au mta-sts.melbournefitouts.au saxdqapp.melbournefitouts.au www.melbournefitouts.au
nvdltalentscoutcenter.com *.nvdltalentscoutcenter.com
*.16.oddballs.com.au *.557307fd-f66f-4f8d-b6ab-f4bc63cbd8fe.oddballs.com.au *.a92b1f08-c1c0-4ad2-a8ad-f4f6a74c7470.oddballs.com.au *.m.oddballs.com.au oddballs.com.au *.oddballs.com.au *.public.oddballs.com.au *.share.oddballs.com.au *.wildcard.oddballs.com.au *.ww16.oddballs.com.au *.ww25.oddballs.com.au *.ww38.oddballs.com.au *.www.oddballs.com.au
*.003.rkdmf0429.com *.300.rkdmf0429.com rkdmf0429.com *.rkdmf0429.com
*.random.sportvandaag.com sportvandaag.com *.sportvandaag.com
*.backend.striking.com.au *.backup.striking.com.au striking.com.au *.striking.com.au
*.backup.supplementyourincome.com.au supplementyourincome.com.au *.supplementyourincome.com.au *.ww38.supplementyourincome.com.au
*.backup.surfersparadisehotel.com.au surfersparadisehotel.com.au *.surfersparadisehotel.com.au
*.backup.taxaccountantsaustralia.com.au taxaccountantsaustralia.com.au *.taxaccountantsaustralia.com.au
*.backup.thebarossa.com.au thebarossa.com.au *.thebarossa.com.au
*.autoconfig.turfs.com.au *.backup.turfs.com.au turfs.com.au *.turfs.com.au *.ww38.turfs.com.au
*.admin.xx35.live *.app.xx35.live *.dashboard.xx35.live *.dev.xx35.live *.sso.xx35.live *.staging.xx35.live *.test.xx35.live xx35.live *.xx35.live