Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=dabofu4.beauty
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 19, 2026
Valid Until
January 17, 2027
77 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
3A:D1:C1:80:31:F3:3F:FB:28:DC:8A:A5:4A:37:97:C7:F8:E8:FE:F6:A6:A4:DA:FE:60:DF:CF:95:9A:B1:9A:37
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
newconcretedecor.com
*.newconcretedecor.com
*.dev.newconcretedecor.com
*.ebdisk.newconcretedecor.com
*.lime.newconcretedecor.com
*.localhost.newconcretedecor.com
*.mail.newconcretedecor.com
*.web.newconcretedecor.com
*.webmail.newconcretedecor.com
audincol.com
*.audincol.com
*.comune.audincol.com
*.aaslkc.dabofu4.beauty
*.afyylp.dabofu4.beauty
*.agh.dabofu4.beauty
*.agutej.dabofu4.beauty
*.agwlus.dabofu4.beauty
*.aurvog.dabofu4.beauty
*.bcp.dabofu4.beauty
*.bdo.dabofu4.beauty
*.blm.dabofu4.beauty
*.bugzci.dabofu4.beauty
*.bvd.dabofu4.beauty
*.cjaztc.dabofu4.beauty
*.clcdot.dabofu4.beauty
*.cobexw.dabofu4.beauty
dabofu4.beauty
*.dabofu4.beauty
*.ddkjui.dabofu4.beauty
*.dnx.dabofu4.beauty
*.fzovqq.dabofu4.beauty
*.jicksw.dabofu4.beauty
*.kmvpuz.dabofu4.beauty
*.llp.dabofu4.beauty
*.lnxwjl.dabofu4.beauty
*.onmemm.dabofu4.beauty
*.qfj.dabofu4.beauty
*.qnc.dabofu4.beauty
*.rqaaed.dabofu4.beauty
*.rxsmvh.dabofu4.beauty
*.shpchq.dabofu4.beauty
*.siv.dabofu4.beauty
*.uui.dabofu4.beauty
*.vge.dabofu4.beauty
*.wdslfh.dabofu4.beauty
*.xjtggd.dabofu4.beauty
*.yfj.dabofu4.beauty
*.zmqbhu.dabofu4.beauty
*.dashboard.gs-com.com
gs-com.com
*.gs-com.com
*.odomscrug.gs-com.com
*.pfizercontractedpb.gs-com.com
*.pfizerrxsavin.gs-com.com
*.pfizersavin.gs-com.com
*.xeroxmeterreadin.gs-com.com
*.admin.hellobonafie.com
*.backend.hellobonafie.com
*.demo.hellobonafie.com
*.dev.hellobonafie.com
hellobonafie.com
*.hellobonafie.com
*.intranet.hellobonafie.com
*.lesarthursemo.hellobonafie.com
*.myoakintranet.hellobonafie.com
*.patient.hellobonafie.com
*.portal.hellobonafie.com
*.rd.hellobonafie.com
*.remote.hellobonafie.com
*.shop.hellobonafie.com
*.store.hellobonafie.com
*.www.hellobonafie.com
*.2wsf.hylastech.com
*.a50v.hylastech.com
*.dmzp.hylastech.com
*.e4ko7.hylastech.com
*.hk94.hylastech.com
hylastech.com
*.hylastech.com
*.mrb.hylastech.com
*.s2zg0.hylastech.com
*.vvai.hylastech.com
*.yqkc26m.hylastech.com
*.letemaritechnologies.visionexcellencecenter.com
visionexcellencecenter.com
*.visionexcellencecenter.com
*.dashboard.w-mall.com
*.dev.w-mall.com
w-mall.com
*.w-mall.com
Other domains in certificate