Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=awningssales.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 26, 2026
Valid Until
April 26, 2026
77 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
53:08:5B:55:E8:ED:05:7B:9E:35:4C:1B:BB:74:81:49:DE:82:AB:AB:D3:AD:B1:9B:69:F6:10:F7:EE:92:B1:B9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
fresnosheriffs.org
*.fresnosheriffs.org
*.m.fresnosheriffs.org
advear.site
*.advear.site
*.reklama.advear.site
awningssales.com
*.awningssales.com
*.belt.awningssales.com
*.blenders.awningssales.com
*.bridallehengas.awningssales.com
*.chains.awningssales.com
*.earrings.awningssales.com
*.hairpin.awningssales.com
*.highheel.awningssales.com
*.kettles.awningssales.com
*.lightkits.awningssales.com
*.postlamp.awningssales.com
*.sweatshirts.awningssales.com
*.asia.bm88slot2.com
*.biz.bm88slot2.com
bm88slot2.com
*.bm88slot2.com
*.club.bm88slot2.com
*.co.bm88slot2.com
*.com.bm88slot2.com
*.facebook.bm88slot2.com
*.host.bm88slot2.com
*.info.bm88slot2.com
*.live.bm88slot2.com
*.net.bm88slot2.com
*.online.bm88slot2.com
*.pro.bm88slot2.com
*.quest.bm88slot2.com
*.vip.bm88slot2.com
*.website.bm88slot2.com
*.wiki.bm88slot2.com
*.work.bm88slot2.com
corebridgefonancial.com
*.corebridgefonancial.com
*.dddd.corebridgefonancial.com
feathervis.pw
*.feathervis.pw
*.dev.fredomcabinet.com
fredomcabinet.com
*.fredomcabinet.com
*.hostmaster.fredomcabinet.com
*.m.fredomcabinet.com
*.wildcard.fredomcabinet.com
*.ww25.fredomcabinet.com
*.autodiscover.ivaai.tech
*.ftp.ivaai.tech
ivaai.tech
*.ivaai.tech
magicclicker.ch
*.magicclicker.ch
*.random.magicclicker.ch
*.ww16.magicclicker.ch
*.account.mycamdenliving.com
mycamdenliving.com
*.mycamdenliving.com
*.test.mycamdenliving.com
paullafontaine.store
*.paullafontaine.store
*.sitemap.paullafontaine.store
pkian.online
*.pkian.online
sttasonline.com
*.sttasonline.com
*.tradevia.sttasonline.com
teai.fun
*.teai.fun
technest.online
*.technest.online
techtoo.site
*.techtoo.site
*.pacs.tjmedicine.org
tjmedicine.org
*.tjmedicine.org
tonapes.online
*.tonapes.online
toolzy.online
*.toolzy.online
turkrugo.online
*.turkrugo.online
uni-auto.online
*.uni-auto.online
urban-street-food.de
*.urban-street-food.de
Other domains in certificate