76/100 SECURITY SCORE

Certificate Information

Subject
CN=pohon8-amp.beauty
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 21, 2026
Valid Until
August 19, 2026 66 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
15:11:03:43:54:F5:4A:A2:F0:F2:AB:9A:C9:5F:4D:CB:41:5E:E7:13:8E:6A:44:F6:57:EE:9B:B9:04:AC:BD:CC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
89acde.top *.89acde.top *.89wkp.89acde.top *.aqzmk.89acde.top *.enr3p.89acde.top *.g22y8.89acde.top *.hrka1.89acde.top *.ip4i2.89acde.top *.jyikv.89acde.top *.m3eo7m.89acde.top *.n2pro.89acde.top *.nan1j.89acde.top *.nslow.89acde.top *.o7p4x.89acde.top *.osldc.89acde.top *.rczhl.89acde.top *.s28s9.89acde.top *.zl1z8.89acde.top *.zyu43.89acde.top

Other domains in certificate

09094.sbs *.09094.sbs *.2p1kfz.09094.sbs *.docs.09094.sbs *.hr.09094.sbs *.intranet.09094.sbs *.my.09094.sbs *.portal.09094.sbs *.share.09094.sbs *.sharepoint.09094.sbs
expresswireless702.com *.expresswireless702.com *.www.expresswireless702.com
*.aknr.kegmi.com *.app.kegmi.com kegmi.com *.kegmi.com
monroviaplumbers365.de *.monroviaplumbers365.de
pohon8-amp.beauty *.pohon8-amp.beauty *.r9iwnp.pohon8-amp.beauty *.www.pohon8-amp.beauty
*.api.sdsbatu-karang.org *.app.sdsbatu-karang.org *.backup.sdsbatu-karang.org *.dev.sdsbatu-karang.org *.dsbafl.sdsbatu-karang.org *.gpsdsdsbafl.sdsbatu-karang.org *.mail.sdsbatu-karang.org sdsbatu-karang.org *.sdsbatu-karang.org *.staging.sdsbatu-karang.org *.twujjgpsdsdsbafl.sdsbatu-karang.org *.uat.sdsbatu-karang.org
skirttide.shop *.skirttide.shop *.t3v570.skirttide.shop
*.0285a15a-3d14-4fa2-86ad-b5f834aff3cb.soultoshi.meme *.app.soultoshi.meme *.c2b1143a-4bcb-4341-ab31-f3f39d012a8a.soultoshi.meme *.cfc7ed88-92dc-43a5-8985-7f7c81906cd5.soultoshi.meme *.dev.soultoshi.meme *.members.soultoshi.meme soultoshi.meme *.soultoshi.meme *.test.soultoshi.meme *.us34tr.soultoshi.meme *.www.soultoshi.meme
*.admin.stuidio.co.uk *.app.stuidio.co.uk *.cloud.stuidio.co.uk *.help.stuidio.co.uk *.m.stuidio.co.uk *.mail.stuidio.co.uk *.marketing.stuidio.co.uk *.notexistsadmin.stuidio.co.uk *.qa.stuidio.co.uk *.rd.stuidio.co.uk *.rds.stuidio.co.uk *.remote.stuidio.co.uk *.stg.stuidio.co.uk stuidio.co.uk *.stuidio.co.uk *.tzxacdev.stuidio.co.uk
*.groupon.tan.tv *.m.tan.tv *.stats.tan.tv tan.tv *.tan.tv *.upon.tan.tv