Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=dog-food.click
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 11, 2026
Valid Until
August 09, 2026 68 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:5D:C9:7F:FC:87:91:12:93:AA:B9:99:DA:DC:CC:39:D5:AC:5E:B2:BF:84:16:EA:CE:64:D5:CF:95:EF:AC:92
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
kerryway.net *.kerryway.net *.ihttsmtp.kerryway.net

Other domains in certificate

123graphics.com *.123graphics.com
69s.it *.69s.it *.hostmaster.69s.it *.notexists1.69s.it
activrx.com *.activrx.com
*.95e9aa64-3003-47ef-8700-e325e3458642.app-games-orvikpedi.xyz *.a0ba9ae5-ffeb-4509-8c3d-57164d230495.app-games-orvikpedi.xyz *.api.app-games-orvikpedi.xyz app-games-orvikpedi.xyz *.app-games-orvikpedi.xyz *.ww25.app-games-orvikpedi.xyz
bgame7777.xyz *.bgame7777.xyz
creditreports.to *.creditreports.to *.ww38.creditreports.to
day2soap.xyz *.day2soap.xyz
dog-food.click *.dog-food.click *.ww25.dog-food.click *.ww7.dog-food.click
empire-construct.com *.empire-construct.com *.ww25.empire-construct.com
freeshipping.com.au *.freeshipping.com.au *.ww25.freeshipping.com.au
ftwccu.com *.ftwccu.com
insoles.it *.insoles.it
*.app.mentor-ia.top *.d.mentor-ia.top *.dev.mentor-ia.top mentor-ia.top *.mentor-ia.top *.xkv7x1.mentor-ia.top
officesolution.com.au *.officesolution.com.au *.www.officesolution.com.au
opnmagazine-digital.com *.opnmagazine-digital.com *.ww38.opnmagazine-digital.com
osechi-yasui.xyz *.osechi-yasui.xyz
*.demon.pants.co.uk pants.co.uk *.pants.co.uk *.sock.pants.co.uk
ptrynn.com *.ptrynn.com
*.ramge.soft.au soft.au *.soft.au
*.dns.teencandid.com *.email.teencandid.com *.exchange.teencandid.com *.hostmaster.teencandid.com *.mail.teencandid.com *.mailin.teencandid.com *.mx7.teencandid.com *.root.teencandid.com *.spam.teencandid.com teencandid.com *.teencandid.com *.ww1.teencandid.com *.www.teencandid.com
twiorsspex.com *.twiorsspex.com
unber.life *.unber.life
*.nk.urafsw.finance urafsw.finance *.urafsw.finance
*.inst.urban-furniturehub.com urban-furniturehub.com *.urban-furniturehub.com *.www.urban-furniturehub.com
visited.com.au *.visited.com.au *.ww25.visited.com.au
youngs-chocolate-stout.com *.youngs-chocolate-stout.com