Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=zemene.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 15, 2026
Valid Until
September 13, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
88:3D:7F:80:54:D0:1C:89:88:D5:44:48:F9:9F:0F:72:57:B6:62:46:C4:F8:47:03:8A:98:F1:0C:5F:DD:D5:62
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
joyasatoy.com *.joyasatoy.com *.www.joyasatoy.com

Other domains in certificate

barnesansnoble.com *.barnesansnoble.com *.ww25.barnesansnoble.com
billardclub.de *.billardclub.de *.ww25.billardclub.de
blixhd.to *.blixhd.to *.ww16.blixhd.to *.ww25.blixhd.to *.ww38.blixhd.to
chrissiefit.de *.chrissiefit.de *.www.chrissiefit.de
classycorner.com.au *.classycorner.com.au *.members.classycorner.com.au *.ww16.classycorner.com.au *.ww17.classycorner.com.au *.ww25.classycorner.com.au
cydnee.com *.cydnee.com
*.comune.epix.com.au epix.com.au *.epix.com.au *.litt.epix.com.au *.mail.epix.com.au *.ww16.epix.com.au *.ww38.epix.com.au
ffcunm.org *.ffcunm.org *.magento.ffcunm.org *.ns1.ffcunm.org *.ns2.ffcunm.org *.ww25.ffcunm.org *.ww38.ffcunm.org
fundracer.com.au *.fundracer.com.au *.prod.fundracer.com.au *.uat.fundracer.com.au *.ww25.fundracer.com.au
jbod.ca *.jbod.ca
kleinanzeigen.limited *.kleinanzeigen.limited
lapdancer.au *.lapdancer.au
lapergolasantamaria.com *.lapergolasantamaria.com
*.hostmaster.laser-sensors.com laser-sensors.com *.laser-sensors.com *.random.laser-sensors.com *.ww38.laser-sensors.com
melbournetravelagents.com.au *.melbournetravelagents.com.au
polittees.com *.polittees.com *.pro.polittees.com
polygraphs.com.au *.polygraphs.com.au *.ww25.polygraphs.com.au
portdouglasparasailing.com.au *.portdouglasparasailing.com.au *.ww38.portdouglasparasailing.com.au
*.bacanaweb.pousadasunrisebeach.com *.bancanaweb.pousadasunrisebeach.com *.grupohndarg.pousadasunrisebeach.com pousadasunrisebeach.com *.pousadasunrisebeach.com *.random.pousadasunrisebeach.com
rwio.com *.rwio.com
traintable.com.au *.traintable.com.au *.ww25.traintable.com.au
ussana.com *.ussana.com
*.autodiscover.vecteey.com *.cpanel.vecteey.com *.d.vecteey.com *.im.vecteey.com vecteey.com *.vecteey.com *.ww25.vecteey.com
zemene.com *.zemene.com