76/100 SECURITY SCORE

Certificate Information

Subject
CN=bloxburg.life
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 08, 2026
Valid Until
April 08, 2026 51 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
62:8B:4F:9B:AE:37:60:20:1E:F9:DF:FE:61:3F:14:ED:61:BC:1A:EF:74:73:FC:B9:09:6E:B5:87:D9:D3:1C:D3
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
feature.name *.feature.name *.ainstallerconfiguration.feature.name *.analytics.feature.name *.args.feature.name *.assits.feature.name *.data.feature.name *.definition.feature.name *.general.feature.name *.gherkindocument.feature.name *.instance.feature.name *.job.feature.name *.layer.feature.name *.pb.feature.name *.product.feature.name *.row.feature.name *.search.feature.name *.selectedfield.feature.name *.self.feature.name *.taxonomy.feature.name

Other domains in certificate

20for10.com *.20for10.com *.ww25.20for10.com
aberturastemperley.com *.aberturastemperley.com *.ww25.aberturastemperley.com
bathroom.cc *.bathroom.cc *.ffffffffffff.bathroom.cc *.members.bathroom.cc
bdsmtest.net *.bdsmtest.net *.ww25.bdsmtest.net
bergmann.com *.bergmann.com *.mail.bergmann.com *.ww16.bergmann.com *.ww17.bergmann.com
bloxburg.life *.bloxburg.life *.ww16.bloxburg.life
divinerevelation.info *.divinerevelation.info *.jenkins.divinerevelation.info *.production.divinerevelation.info
*.beta.hairclips.com hairclips.com *.hairclips.com *.random.hairclips.com *.w.hairclips.com *.www-1.hairclips.com
*.alnoor-traders.homeremovalist.com.au *.gartfans.homeremovalist.com.au homeremovalist.com.au *.homeremovalist.com.au *.hotverb.homeremovalist.com.au *.itfume.homeremovalist.com.au *.jabsale.homeremovalist.com.au *.redhint.homeremovalist.com.au *.topsays.homeremovalist.com.au *.wiseicon.homeremovalist.com.au *.zahidascollection.homeremovalist.com.au *.zatech.homeremovalist.com.au *.zok.homeremovalist.com.au
*.01.os.au *.adfa.os.au *.despensadeconsej.os.au *.dsg1borlamcw.os.au *.katherinero.os.au *.mu.os.au *.nsw.os.au *.oasis.os.au os.au *.os.au *.pt.os.au *.su.os.au *.u.os.au *.uq.os.au *.ww25.os.au
*.harrisongilb.rapindir.biz *.random.rapindir.biz rapindir.biz *.rapindir.biz *.ww16.rapindir.biz *.ww38.rapindir.biz