75/100 SECURITY SCORE

Certificate Information

Subject
CN=napervillecentralhighschool.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 11, 2026
Valid Until
December 10, 2026 31 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
FA:1C:13:E1:DD:E3:45:DA:AD:AF:8A:42:96:0F:86:48:9C:A3:80:82:93:E3:AE:07:A9:AD:DA:CF:33:F4:97:88
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
killswitch.com.au *.killswitch.com.au *.citrix.killswitch.com.au *.comune.killswitch.com.au *.dev.killswitch.com.au *.mail.killswitch.com.au *.preview.killswitch.com.au *.ww25.killswitch.com.au

Other domains in certificate

052588.me *.052588.me
24554.vip *.24554.vip
320353.lol *.320353.lol
40483.co *.40483.co
523897.club *.523897.club
5cipyult.xyz *.5cipyult.xyz
78df561cd01d0f62.com *.78df561cd01d0f62.com
91df.xyz *.91df.xyz
arcxit.com *.arcxit.com
calu.com.au dev.calu.com.au emv1.calu.com.au mail.calu.com.au members.calu.com.au test.calu.com.au www.calu.com.au
check-via.com *.check-via.com
deltaukr.online *.deltaukr.online *.ww17.deltaukr.online
e9bfb0de74ba0ca0.com *.e9bfb0de74ba0ca0.com
*.048d188c75ab.ebzona.biz *.analytics.ebzona.biz *.app.ebzona.biz *.beta.ebzona.biz *.bi.ebzona.biz *.data.ebzona.biz *.development.ebzona.biz ebzona.biz *.ebzona.biz *.insight.ebzona.biz *.video.ebzona.biz
fdwxizdb.sbs *.fdwxizdb.sbs
*.app.fomovies.co fomovies.co *.fomovies.co *.test.fomovies.co *.ww25.fomovies.co *.ww38.fomovies.co
glambuyz.shop *.glambuyz.shop
*.afifdelazswedding.jadinikah.live *.batalyon21.jadinikah.live jadinikah.live *.jadinikah.live *.minorityrecords.jadinikah.live *.pro.jadinikah.live *.site.jadinikah.live *.solikhinerrin.jadinikah.live *.vincentyuliana.jadinikah.live
mycrewenterprise.co *.mycrewenterprise.co
napervillecentralhighschool.com *.napervillecentralhighschool.com *.random.napervillecentralhighschool.com *.wildcard.napervillecentralhighschool.com *.ww25.napervillecentralhighschool.com
*.mailrelay.poolsandspas.com.au poolsandspas.com.au *.poolsandspas.com.au
*.by.shandiandog.com *.dt.shandiandog.com *.preview.shandiandog.com shandiandog.com *.shandiandog.com
*.e.viralterrbaru.net viralterrbaru.net *.viralterrbaru.net *.ww38.viralterrbaru.net