76/100 SECURITY SCORE

Certificate Information

Subject
CN=unwatermark.online
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 25, 2026
Valid Until
July 24, 2026 61 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2D:A2:F8:AF:DF:C8:8B:8A:F8:D6:E7:BD:9C:D7:BB:F7:22:6B:6B:D0:D2:42:A9:48:98:76:80:B5:46:03:8E:0E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
friendsok.com *.friendsok.com *.7.friendsok.com *.cpcalendars.friendsok.com *.my7love.friendsok.com *.ns1.friendsok.com *.test.friendsok.com *.w.friendsok.com

Other domains in certificate

1098lls301.top *.1098lls301.top *.e8175f3dbc.1098lls301.top *.ef23b356c2.1098lls301.top *.ef3828f2c3.1098lls301.top *.f0c23d0456.1098lls301.top
*.mx7.nickak.com nickak.com *.nickak.com *.ww7.nickak.com *.ww9.nickak.com *.www.nickak.com
*.app.osf-facts.org *.mail.osf-facts.org *.mail3.osf-facts.org *.ns1.osf-facts.org *.ns2.osf-facts.org osf-facts.org *.osf-facts.org *.sitemap.osf-facts.org *.sitemaps.osf-facts.org *.tracking.osf-facts.org *.www.osf-facts.org
*.36a07b03-b7ad-46c9-b5fc-6cd1bffe7992.seattle-concerts.com *.78d8a907-8efa-4f42-9bdf-e3ad52d60901.seattle-concerts.com *.8c9578f3-3a14-421a-9955-17b5b81e5ece.seattle-concerts.com *.940a55b3-f3d7-4616-8f5c-00f63b4c2a35.seattle-concerts.com *.a.seattle-concerts.com *.admin.seattle-concerts.com *.api.seattle-concerts.com *.argo.seattle-concerts.com *.autodiscover.seattle-concerts.com *.backend.seattle-concerts.com *.demo.seattle-concerts.com *.dev.seattle-concerts.com *.email.seattle-concerts.com *.ftp.seattle-concerts.com *.gitlab.seattle-concerts.com *.hostmaster.seattle-concerts.com *.m.seattle-concerts.com *.random.seattle-concerts.com seattle-concerts.com *.seattle-concerts.com *.vpn.seattle-concerts.com *.www.seattle-concerts.com *.wwww.seattle-concerts.com
*.037dc507-eb53-401a-8590-57d8b408d0a0.tampa-concerts.com *.3344f24e-271a-4b73-af33-fee125bd32cb.tampa-concerts.com *.735ec07f-5698-4c1d-8769-4bf91489f4ff.tampa-concerts.com *.a.tampa-concerts.com *.admin.tampa-concerts.com *.api.tampa-concerts.com *.app.tampa-concerts.com *.assets.tampa-concerts.com *.backend.tampa-concerts.com *.cloud.tampa-concerts.com *.cpcalendars.tampa-concerts.com *.demo.tampa-concerts.com *.dev.tampa-concerts.com *.fed51cf5-b2f9-452d-894d-7c413af4e6fc.tampa-concerts.com *.git.tampa-concerts.com *.gitlab.tampa-concerts.com *.hostmaster.tampa-concerts.com *.old.tampa-concerts.com *.rd.tampa-concerts.com *.rds.tampa-concerts.com *.rdweb.tampa-concerts.com *.remote.tampa-concerts.com *.staging.tampa-concerts.com tampa-concerts.com *.tampa-concerts.com *.www.tampa-concerts.com *.wwww.tampa-concerts.com
*.090f37df-26d1-42f5-9e01-a1dddafd3382.unwatermark.online *.76ff401-da54-44fe-a77f-eb81bbeb1c76.unwatermark.online *.admin.unwatermark.online *.hop.unwatermark.online *.shop.unwatermark.online unwatermark.online *.unwatermark.online