76/100 SECURITY SCORE

Certificate Information

Subject
CN=urethroplasty.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 17, 2026
Valid Until
May 18, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E2:EE:79:79:3F:4F:D2:DB:74:37:06:14:30:09:F6:DC:84:8E:AA:31:E9:98:59:D8:88:44:52:F0:D6:0E:B6:24
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
settle.link *.settle.link *.admin.settle.link *.api.settle.link *.cnjhqzvd.settle.link *.cpyvfdtb.settle.link *.dev.settle.link *.ehskndcl.settle.link *.elvcgjxb.settle.link *.exdfnmiz.settle.link *.fnlvwzqm.settle.link *.fxhmbnjp.settle.link *.ihywqzge.settle.link *.jaghouye.settle.link *.jbdgeqpa.settle.link *.jgudwbcz.settle.link *.keqxawfd.settle.link *.klbipyjd.settle.link *.kueomzkayehlq.settle.link *.lfdemjoh.settle.link *.lvyasjze.settle.link *.lwfxvton.settle.link *.mbpzvcok.settle.link *.mhotfcbx.settle.link *.nmlsqxei.settle.link *.nzhovbws.settle.link *.pgowqsvz.settle.link *.qadbysjk.settle.link *.qsrykedh.settle.link *.qxemrbut.settle.link *.qzahpogl.settle.link *.salnywgd.settle.link *.sldphrzg.settle.link *.srjqpfec.settle.link *.staging.settle.link *.swzltknm.settle.link *.test.settle.link *.tmobile.settle.link *.wjltiaoe.settle.link *.wmxrbdnj.settle.link *.wszbapgowqsvz.settle.link *.wvpqltfe.settle.link *.yerobifz.settle.link

Other domains in certificate

138raja.com *.138raja.com *.sharepoint.138raja.com
bremadent.com *.bremadent.com *.random.bremadent.com *.www.bremadent.com
cash-btc.com *.cash-btc.com *.ecommerce.cash-btc.com *.exchange.cash-btc.com *.game.cash-btc.com *.git.cash-btc.com *.mail.cash-btc.com *.mail10.cash-btc.com *.mailgate.cash-btc.com
*.adm.hoodllaw.systems *.api.hoodllaw.systems *.backup.hoodllaw.systems *.dashboard.hoodllaw.systems *.dev.hoodllaw.systems hoodllaw.systems *.hoodllaw.systems *.hostmaster.hoodllaw.systems *.mailer.hoodllaw.systems *.marketing.hoodllaw.systems *.portal.hoodllaw.systems *.secure.hoodllaw.systems *.share.hoodllaw.systems *.sharepoint.hoodllaw.systems *.staging.hoodllaw.systems *.stg.hoodllaw.systems *.www.hoodllaw.systems
*.argo.hotwebcam.site hotwebcam.site *.hotwebcam.site *.hu.hotwebcam.site
*.5f13fc38-3d6c-42a1-913a-cb2755f2bdbf.qlys60.app qlys60.app *.qlys60.app *.sharepoint.qlys60.app
*.rds.tradeinn.mx tradeinn.mx *.tradeinn.mx *.workspace1.tradeinn.mx
urethroplasty.com *.urethroplasty.com