SSL Certificate Analysis for jahaancooler.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=empresa.onl

Issuer

C=US, O=Let's Encrypt, CN=YR2

Valid From

June 01, 2026

Valid Until

August 30, 2026 76 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

B8:7C:F7:B8:01:93:E6:75:36:69:8A:D5:BA:EB:D0:85:9B:B1:9F:A1:F2:E8:B1:A2:A0:8F:93:47:DB:78:B3:99

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

jahaancooler.com *.jahaancooler.com *.mail.jahaancooler.com *.smtp.jahaancooler.com *.ww25.jahaancooler.com

Other domains in certificate

*.3701268a-5dec-48c0-8f55-498e255ba4cc.auroraellc.com *.48a91279-cb5f-47ac-acf0-0ec9cb92aa8f.auroraellc.com *.admin.auroraellc.com *.api.auroraellc.com *.app.auroraellc.com *.assets.auroraellc.com auroraellc.com *.auroraellc.com *.d8xlcn.auroraellc.com *.demo.auroraellc.com *.dev.auroraellc.com *.jjuhad8xlcn.auroraellc.com *.members.auroraellc.com *.remote.auroraellc.com *.roqsqdemo.auroraellc.com *.shop.auroraellc.com *.staging.auroraellc.com *.testing.auroraellc.com *.www.auroraellc.com

bigboobiebabes.com *.bigboobiebabes.com *.ww25.bigboobiebabes.com

*.demo.empresa.onl *.dev.empresa.onl empresa.onl *.empresa.onl

jellybeancyber.co *.jellybeancyber.co *.ww16.jellybeancyber.co *.ww25.jellybeancyber.co

*.hostmaster.markethorizons.com markethorizons.com *.markethorizons.com *.ww16.markethorizons.com *.ww25.markethorizons.com

netson.co *.netson.co *.sitemap.netson.co *.www.netson.co

*.3g.ouwtug.top ouwtug.top *.ouwtug.top

parflothermax.co.uk *.parflothermax.co.uk *.random.parflothermax.co.uk

*.app.rik75.net *.demo.rik75.net *.hotfix.rik75.net rik75.net *.rik75.net *.sitemap.rik75.net *.sitemaps.rik75.net *.www.rik75.net

*.ddd.ucylc.me *.ooo.ucylc.me ucylc.me *.ucylc.me

whisperedbythewind.com *.whisperedbythewind.com *.ww38.whisperedbythewind.com