76/100 SECURITY SCORE

Certificate Information

Subject
CN=bitcoinconference.com.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 02, 2026
Valid Until
July 01, 2026 65 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9C:F2:DF:B9:3A:61:A0:91:46:E1:B8:67:03:A3:ED:33:5F:E0:CC:3D:4D:D1:53:F5:FE:84:26:BD:05:20:57:15
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
subsstack.com *.subsstack.com *.autosaveisforwimps.subsstack.com *.darkmodebooks.subsstack.com *.evilwitches.subsstack.com *.ilcdailyswing.subsstack.com *.jdrakephd.subsstack.com *.marytabor.subsstack.com *.ww25.subsstack.com *.ww38.subsstack.com

Other domains in certificate

58286.cc *.58286.cc *.api.58286.cc *.dev.58286.cc *.home.58286.cc *.insight.58286.cc *.m.58286.cc *.mobile.58286.cc *.sitemaps.58286.cc *.web.58286.cc
asab.it *.asab.it *.bi.asab.it *.demo.asab.it *.dev.asab.it
bitcoinconference.com.au *.bitcoinconference.com.au
etherconnect.co *.etherconnect.co *.testnet.etherconnect.co
*.abot.hkh.my *.admin.hkh.my *.api.hkh.my hkh.my *.hkh.my *.m.hkh.my *.staging.hkh.my *.test.hkh.my *.www.hkh.my
*.apps.needtoappraisemyhome.com *.backup.needtoappraisemyhome.com *.dev.needtoappraisemyhome.com needtoappraisemyhome.com *.needtoappraisemyhome.com *.v1.needtoappraisemyhome.com
pushback.com.au *.pushback.com.au
*.cpcalendars.suppsrus.com suppsrus.com *.suppsrus.com
*.myasorubkaa.tosite.space *.pemza.tosite.space tosite.space *.tosite.space
*.beta.wazza.com *.staging.wazza.com *.static.wazza.com *.users.wazza.com wazza.com *.wazza.com *.wazza.wazza.com
*.ecommerce.webleesangdigital.com *.temp.webleesangdigital.com *.templet.webleesangdigital.com webleesangdigital.com *.webleesangdigital.com
*.02ad13fc-1630-4499-888b-0908608c263c.yummgummies.com *.a2bf1037-4c96-4418-8ccf-343ffae59d52.yummgummies.com *.api.yummgummies.com *.assets.yummgummies.com *.backup.yummgummies.com *.cloud.yummgummies.com *.demo.yummgummies.com *.dev.yummgummies.com *.mailer.yummgummies.com *.marketing.yummgummies.com *.rd.yummgummies.com *.rdweb.yummgummies.com *.remote.yummgummies.com *.rzqclbackup.yummgummies.com *.secure.yummgummies.com *.stg.yummgummies.com *.test.yummgummies.com *.tyetduat.yummgummies.com *.v1.yummgummies.com *.vpn.yummgummies.com *.web.yummgummies.com yummgummies.com *.yummgummies.com