SSL Certificate Analysis for m.poolu.app - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=dizhi36.xyz

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

April 27, 2026

Valid Until

July 26, 2026 75 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

E5:BD:5D:F4:7B:39:29:E3:E4:13:E9:23:94:63:FA:B6:23:16:52:5D:3A:3D:D7:D0:F9:98:96:DA:6D:BE:B8:D1

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

poolu.app *.poolu.app *.api.poolu.app *.autodiscover.poolu.app *.press.poolu.app *.ry4ur5.poolu.app

Other domains in certificate

*.6b07a8e4-5761-42d6-bd01-b0e552be22cf.aicopyright.art *.8c8db66b-c555-420b-a316-b1c971dd3d09.aicopyright.art *.acceptance.aicopyright.art *.admin.aicopyright.art aicopyright.art *.aicopyright.art *.api.aicopyright.art *.app.aicopyright.art *.assets.aicopyright.art *.auth.aicopyright.art *.ba6ecdfc-832f-40eb-ae4e-4072cf8c589d.aicopyright.art *.backoffice.aicopyright.art *.backup.aicopyright.art *.bestellen.aicopyright.art *.blog.aicopyright.art *.cabinet.aicopyright.art *.cb498f14-18ca-46d9-9a1c-a4303aa910a9.aicopyright.art *.client.aicopyright.art *.dashboard.aicopyright.art *.demo.aicopyright.art *.dev.aicopyright.art *.docs.aicopyright.art *.evpsvncvmxacceptance.aicopyright.art *.external.aicopyright.art *.gestion.aicopyright.art *.hostmaster.aicopyright.art *.images.aicopyright.art *.intranet.aicopyright.art *.ivgrqstaging.aicopyright.art *.m.aicopyright.art *.my.aicopyright.art *.ncvmxacceptance.aicopyright.art *.nuxznstaging.aicopyright.art *.portal.aicopyright.art *.public.aicopyright.art *.qa.aicopyright.art *.rustore.aicopyright.art *.ruzpeatf.aicopyright.art *.secure.aicopyright.art *.share.aicopyright.art *.sharepoint.aicopyright.art *.staging.aicopyright.art *.stg.aicopyright.art *.v1.aicopyright.art *.web.aicopyright.art

*.cftn3burk3.chateau-caseneuve.com chateau-caseneuve.com *.chateau-caseneuve.com *.cloud.chateau-caseneuve.com *.dev.chateau-caseneuve.com *.exchange.chateau-caseneuve.com *.gate.chateau-caseneuve.com *.krasnodar.chateau-caseneuve.com *.mx.chateau-caseneuve.com *.remote.chateau-caseneuve.com

dizhi36.xyz *.dizhi36.xyz

shareoweneronline.com *.shareoweneronline.com *.ww25.shareoweneronline.com

understandingsuper.au *.understandingsuper.au