Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=ortviai.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 13, 2026
Valid Until
May 14, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F9:6D:28:51:6E:A8:9E:FE:7A:CC:D6:D8:01:63:A4:56:29:A0:82:86:25:76:2B:BF:EC:04:DD:5E:E2:B4:C6:18
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
loanholder.com *.loanholder.com *.admin.loanholder.com *.api.loanholder.com *.app.loanholder.com *.assets.loanholder.com *.backup.loanholder.com *.dashboard.loanholder.com *.demo.loanholder.com *.dev.loanholder.com *.ftp.loanholder.com *.hostmaster.loanholder.com *.m.loanholder.com *.mail.loanholder.com *.mailer.loanholder.com *.marketing.loanholder.com *.qa.loanholder.com *.secure.loanholder.com *.sitemaps.loanholder.com *.staging.loanholder.com *.stg.loanholder.com *.test.loanholder.com *.uat.loanholder.com *.v1.loanholder.com *.v2.loanholder.com *.web.loanholder.com *.ww17.loanholder.com *.ww41.loanholder.com

Other domains in certificate

beautifydiary.com *.beautifydiary.com
hangsteine.de *.hangsteine.de *.ww16.hangsteine.de
*.2ed15847-ea73-4b00-b6e6-16eb878140f6.modelajevirtual.com *.admin.modelajevirtual.com *.api.modelajevirtual.com *.assets.modelajevirtual.com *.backup.modelajevirtual.com *.blog.modelajevirtual.com *.cloud.modelajevirtual.com *.dashboard.modelajevirtual.com *.demo.modelajevirtual.com *.grnqvdemo.modelajevirtual.com *.marketing.modelajevirtual.com *.mautic.modelajevirtual.com modelajevirtual.com *.modelajevirtual.com *.qa.modelajevirtual.com *.rd.modelajevirtual.com *.rdweb.modelajevirtual.com *.secure.modelajevirtual.com *.staging.modelajevirtual.com *.uat.modelajevirtual.com *.web.modelajevirtual.com *.webdisk.modelajevirtual.com *.webmail.modelajevirtual.com *.wp.modelajevirtual.com *.www.modelajevirtual.com
ortviai.com *.ortviai.com *.sitemap.ortviai.com *.sitemaps.ortviai.com *.www.ortviai.com
ritchey.net *.ritchey.net *.sitemap.ritchey.net *.sitemaps.ritchey.net
*.admin.tastefulfoodexcursion.food *.api.tastefulfoodexcursion.food *.app.tastefulfoodexcursion.food *.intranet.tastefulfoodexcursion.food *.shop.tastefulfoodexcursion.food tastefulfoodexcursion.food *.tastefulfoodexcursion.food
*.admin.telefongiriscis.my *.api.telefongiriscis.my *.blog.telefongiriscis.my *.d39ecc2f-d648-4878-9972-2a0c586f28fc.telefongiriscis.my telefongiriscis.my *.telefongiriscis.my *.test.telefongiriscis.my
*.out.the-slimming-gummies.com *.qcbxmr.the-slimming-gummies.com *.sitemap.the-slimming-gummies.com the-slimming-gummies.com *.the-slimming-gummies.com *.wildcard.the-slimming-gummies.com
*.mail.thewellgovernor.com thewellgovernor.com *.thewellgovernor.com