75/100 SECURITY SCORE

Certificate Information

Subject
CN=ithomedelivery.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 06, 2026
Valid Until
January 04, 2027 62 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
68:26:25:24:4F:CD:17:AD:27:57:79:6E:28:3C:C8:AC:8D:34:DA:45:10:A3:36:DD:EF:A2:6C:2C:5D:B9:1E:69
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

77 domains
pumpjacksbaseball.com *.pumpjacksbaseball.com *.api.pumpjacksbaseball.com *.commail.pumpjacksbaseball.com *.m.pumpjacksbaseball.com *.mta-sts.pumpjacksbaseball.com

Other domains in certificate

*.analytic.greetingcard.uk.com *.dashboard.greetingcard.uk.com *.demo.greetingcard.uk.com *.dev.greetingcard.uk.com *.flowise.greetingcard.uk.com greetingcard.uk.com *.greetingcard.uk.com *.hotfix-viz.greetingcard.uk.com *.hotfix.greetingcard.uk.com *.info.greetingcard.uk.com *.insights.greetingcard.uk.com *.integration.greetingcard.uk.com *.jenkins-poc.greetingcard.uk.com *.m.greetingcard.uk.com *.magento.greetingcard.uk.com *.mx.greetingcard.uk.com *.old.greetingcard.uk.com *.prod-viz.greetingcard.uk.com *.production.greetingcard.uk.com *.qa.greetingcard.uk.com *.remote.greetingcard.uk.com *.report.greetingcard.uk.com *.staging-metabase.greetingcard.uk.com *.staging.greetingcard.uk.com *.store.greetingcard.uk.com *.superset-production.greetingcard.uk.com *.superset.greetingcard.uk.com *.test.greetingcard.uk.com *.visualizations-prod.greetingcard.uk.com *.vpn.greetingcard.uk.com
*.com.heisitv.com *.comlp.heisitv.com heisitv.com *.heisitv.com
*.hermes.ithomedelivery.com ithomedelivery.com *.ithomedelivery.com
*.espanol.mylifecoach.com.au *.gortel.mylifecoach.com.au *.helpdesk.mylifecoach.com.au *.hr.mylifecoach.com.au *.img.mylifecoach.com.au *.localgaragesales.mylifecoach.com.au *.mail.mylifecoach.com.au *.mail2.mylifecoach.com.au *.my.mylifecoach.com.au mylifecoach.com.au *.mylifecoach.com.au *.old.mylifecoach.com.au *.online.mylifecoach.com.au *.sellerguardian.mylifecoach.com.au *.smtp.mylifecoach.com.au *.testing.mylifecoach.com.au *.wordpress.mylifecoach.com.au *.ww17.mylifecoach.com.au *.ww38.mylifecoach.com.au
*.32.onetopvpn.com onetopvpn.com *.onetopvpn.com *.ww17.onetopvpn.com
06af63f2-6e07-4197-87d9-fef4d18c11e0.sunshinerealestate.net.au administrator.sunshinerealestate.net.au cli.sunshinerealestate.net.au forum.sunshinerealestate.net.au jfpaseoz.sunshinerealestate.net.au rmbzetga.sunshinerealestate.net.au sunshinerealestate.net.au www.sunshinerealestate.net.au
*.game.zagamingtips.com zagamingtips.com *.zagamingtips.com