78/100 SECURITY SCORE

Certificate Information

Subject
CN=helenplus.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 30, 2026
Valid Until
April 30, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
77:30:B7:DA:56:6E:27:59:33:25:A6:04:ED:56:9F:60:69:DE:F0:96:69:86:D4:C2:0D:54:7D:3F:C5:57:48:46
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Weak
require-trusted-types-for; report-uri; object-src; +3 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Significantly strengthen CSP directives
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
link-test.rituals.com returnportal.rituals.com

Other domains in certificate

my.a1pay.net
aimeetheriot.net
characters-caropaulette.beryl.cc
shipanther-test.bigpanther.ca
bongu.in
boomhunk.com
admin.bravort.com
qrcode.camporionline.org
www.chym-elearning.com
www.cityswapp.com
auth.map.cmutt.app
uat4.weget.co.th
lawyers-dev.legal.coconala.com
demorinindonesia.com
www.dotryan.com
display.eldrly.ch
electro-control.ch
asset.ethnustech.com
crm-api.evtit.com
www.fonsagency.com
fundacionmembrana.org
gangaaeng.com
helenplus.com
hshgeneraltrading.com
inbio.me
hora.iosxpert.cloud
mta-sts.iservicio.com.mx
mta-sts.iservicio.mx
jobails.com
testsign.kkeap.com
app.lifefyt.com
luditics.com
www.margauxmasson.com
mentorgue.com
menusbyv.com
www.myboardprep.com
natuurlab.naturalis.nl
imagenes.neerutech.com
nonaelectric.com
beam.rd.nyt.net dev.beam.rd.nyt.net guide.beam.rd.nyt.net
panarastudio.in
paycapp.com
www.perigarealestate.com
plastikalidad.com
auth.practicetestsdmv.com
jsd-online-demo.preemptive.com
printer-px.com
prodivio.com
professionalhostelownersassociation.com
proteosoftware.com
pvp-it.com
www.raqamshasi.com
www.raqamshasy.com
rawaalhethab.com
login.recatch.cc
richaux.com
ryanbeiden.com
schedulebuilder.net
anna.scorethebusiness.com
casfogsandbox.sgroneclick.com
www.shubhrishta.com
prospector-stg.silveregg.net
www.simonstmichel.dev
www.sitiosantaadelia.com
bzs.slotendrecht.nl dbs.slotendrecht.nl mcs.slotendrecht.nl shop6.slotendrecht.nl zonoptiek.slotendrecht.nl
snippetscript.com
hotdesks.spyro-dev.net
backrub.studlars.com www.backrub.studlars.com
www.sunnygarden.vn
admin.takechargeinternational.com
www.tapasdhar.com
www.tcheepeng.com
www.tehpostach.com
thebaselab.com
thiskarl.com
throneofceylon.com
stage.itinerary.tripmaker.ai
www.tymeline.id
utpannadesignworks.com
educa.valoriq.com.br
vtx3.dev
wassim-ennaji.fr
www.xn--24-ftidu.com xn--24-ftidu.com
xn--72ci8dblyvdqe3f1a9ig6b4e8c.com
www.xn--82c4adcd7cf7cc7dnbe0a1d5uc.com
xn--domicilioscaaveral-y0b.com
xn--i1b2ba3g9fi.com
xn--mgbac1a2gijaufx.com
xn--phry5son2c.com
www.pilot.youtranslate.bible