Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=prepaidgiftbalance.life
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 13, 2026
Valid Until
August 11, 2026 74 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3C:03:C4:FF:8B:D1:7F:FD:6B:7B:03:D2:5F:F5:FB:AC:B7:12:4F:DB:18:8B:AE:D8:B4:C3:8F:E1:9E:26:B5:1E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
jutwatch.com *.jutwatch.com *.ww38.jutwatch.com *.www.jutwatch.com

Other domains in certificate

abovepar-lawncare.com *.abovepar-lawncare.com *.poemfarm.abovepar-lawncare.com
*.ar.fireescapecharters.com *.bg.fireescapecharters.com *.de.fireescapecharters.com *.fi.fireescapecharters.com fireescapecharters.com *.fireescapecharters.com *.iw.fireescapecharters.com *.ko.fireescapecharters.com *.lv.fireescapecharters.com *.services.fireescapecharters.com *.shop.fireescapecharters.com *.staging.fireescapecharters.com
*.api.homeawesome.in *.app.homeawesome.in *.archive.homeawesome.in *.auth.homeawesome.in *.back.homeawesome.in *.backend.homeawesome.in *.bfqde2023llsplde12qd27qdl.homeawesome.in *.cesia-api.homeawesome.in *.cloud.homeawesome.in *.collaborate.homeawesome.in *.common-api.homeawesome.in *.demo.homeawesome.in *.extranet.homeawesome.in *.git.homeawesome.in homeawesome.in *.homeawesome.in *.mall.homeawesome.in *.mp.homeawesome.in *.omada.homeawesome.in *.ouleeservice.homeawesome.in *.postback.homeawesome.in *.prod.homeawesome.in *.saas.homeawesome.in *.services.homeawesome.in *.sitemaps.homeawesome.in *.staging.homeawesome.in *.v1.homeawesome.in *.vpn.homeawesome.in *.web.homeawesome.in *.ww38.homeawesome.in *.www.homeawesome.in *.wx.homeawesome.in *.xcx.homeawesome.in
*.dc-98b09c8d505c.inovasee.com inovasee.com *.inovasee.com *.www.inovasee.com
*.bbs.managementconsultant.it managementconsultant.it *.managementconsultant.it
*.onevanilla.prepaidgiftbalance.life prepaidgiftbalance.life *.prepaidgiftbalance.life *.webdisk.prepaidgiftbalance.life
*.org.qfsbackupsecurity.com qfsbackupsecurity.com *.qfsbackupsecurity.com
*.gateway.sportspicksnetwork.com *.remoteapp.sportspicksnetwork.com sportspicksnetwork.com *.sportspicksnetwork.com
*.api.teamusatour.com teamusatour.com *.teamusatour.com
*.app.trendelevatematrix.com *.dashboard.trendelevatematrix.com *.epiquww12.trendelevatematrix.com *.pr.trendelevatematrix.com *.sitemaps.trendelevatematrix.com *.stage.trendelevatematrix.com trendelevatematrix.com *.trendelevatematrix.com *.ww.trendelevatematrix.com *.ww1.trendelevatematrix.com *.ww12.trendelevatematrix.com
*.app.vaccines.baby *.sitemap.vaccines.baby vaccines.baby *.vaccines.baby *.w48lgq.vaccines.baby *.www.vaccines.baby