Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=61q2.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 16, 2025
Valid Until
March 16, 2026
43 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
92:A0:4C:B0:21:92:07:99:7E:D0:05:B0:3B:F2:40:EA:27:77:B4:94:DD:4F:38:03:F1:39:26:A3:A9:B6:74:47
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
75 domains
jetflyaviation.com
*.jetflyaviation.com
*.random.jetflyaviation.com
*.ww25.jetflyaviation.com
*.ww38.jetflyaviation.com
61q2.com
*.61q2.com
buycompany.org
*.buycompany.org
*.ww38.buycompany.org
channel-7-news.com
*.channel-7-news.com
*.random.channel-7-news.com
*.ww17.channel-7-news.com
codecabinets.net
*.codecabinets.net
*.ww38.codecabinets.net
corporateobjective.com
*.corporateobjective.com
ebonyemo.com
*.ebonyemo.com
*.tour.ebonyemo.com
*.ww38.ebonyemo.com
emaol.com
*.emaol.com
*.mail.emaol.com
*.ww25.emaol.com
*.ww38.emaol.com
freegamemanuals.com
*.freegamemanuals.com
giftsammlung.de
*.giftsammlung.de
jambox.com.au
*.jambox.com.au
letesteur.net
*.letesteur.net
*.ww38.letesteur.net
*.hostmaster.myjpso.com
myjpso.com
*.myjpso.com
paninadrenalyn.com
*.paninadrenalyn.com
*.random.paninadrenalyn.com
parikramamba.com
*.parikramamba.com
*.concumerloans.prnfed.org
*.hostmaster.prnfed.org
prnfed.org
*.prnfed.org
*.campaign.rosscabinets.com
*.random.rosscabinets.com
rosscabinets.com
*.rosscabinets.com
sinus-cavernosus-thrombose.de
*.sinus-cavernosus-thrombose.de
*.ww38.sinus-cavernosus-thrombose.de
*.psb.starmobileinc.com
*.r53.starmobileinc.com
starmobileinc.com
*.starmobileinc.com
ulcers.com.au
*.ulcers.com.au
*.email.usaarentersinsurance.co
*.mail.usaarentersinsurance.co
usaarentersinsurance.co
*.usaarentersinsurance.co
*.webmail.usaarentersinsurance.co
*.ww25.usaarentersinsurance.co
weatherchanell.com
*.weatherchanell.com
*.ww38.weatherchanell.com
xn--gipsabdrcke-0hb.de
*.xn--gipsabdrcke-0hb.de
zalom.de
*.zalom.de
Other domains in certificate