76/100 SECURITY SCORE

Certificate Information

Subject
CN=weprovide.co
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
May 30, 2026
Valid Until
August 28, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A0:20:54:13:7B:7E:A2:BE:F9:45:3B:75:CE:05:F8:15:0D:3B:39:17:52:D7:DF:2E:E5:32:36:C3:E5:5D:A5:2B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
macaron.best *.macaron.best *.1acz0s.macaron.best *.611e3914-07ce-4683-9a6c-c2fedbed4a21.macaron.best *.api.macaron.best *.app.macaron.best *.dev.macaron.best *.mail.macaron.best *.www.macaron.best

Other domains in certificate

*.acc.americaracing.com americaracing.com *.americaracing.com *.forums.americaracing.com *.ogloszenia.americaracing.com *.random.americaracing.com *.tests.americaracing.com *.users.americaracing.com
bitr.net *.bitr.net *.email.bitr.net
*.autodiscover.bnbpla.net bnbpla.net *.bnbpla.net *.cpanel.bnbpla.net *.cpcalendars.bnbpla.net *.cpcontacts.bnbpla.net *.mail.bnbpla.net *.webdisk.bnbpla.net *.webmail.bnbpla.net *.www.bnbpla.net
climbers.org *.climbers.org *.ms.climbers.org *.wildcard.climbers.org
draperyworkroomsupplies.com *.draperyworkroomsupplies.com *.hostmaster.draperyworkroomsupplies.com *.m.draperyworkroomsupplies.com
gej.au *.gej.au *.wildcard.gej.au
*.autodiscover.graphicpla.net *.cpanel.graphicpla.net graphicpla.net *.graphicpla.net *.webmail.graphicpla.net *.www.graphicpla.net
*.backup.laenud.com *.beta.laenud.com *.blog.laenud.com *.crm.laenud.com *.demo.laenud.com *.forum.laenud.com *.hostmaster.laenud.com laenud.com *.laenud.com *.random.laenud.com *.ww1.laenud.com *.ww16.laenud.com *.ww17.laenud.com *.ww25.laenud.com *.ww38.laenud.com
*.mail.moneerentalsandsales.net moneerentalsandsales.net *.moneerentalsandsales.net *.wildcard.moneerentalsandsales.net *.ww17.moneerentalsandsales.net *.ww38.moneerentalsandsales.net
*.blog.virgenmaria.com *.hostmaster.virgenmaria.com *.m.virgenmaria.com *.mail.virgenmaria.com *.sitemaps.virgenmaria.com virgenmaria.com *.virgenmaria.com *.vpn.virgenmaria.com *.webmail.virgenmaria.com *.ww1.virgenmaria.com *.ww16.virgenmaria.com *.ww17.virgenmaria.com *.ww25.virgenmaria.com *.ww38.virgenmaria.com
*.mx.weprovide.co weprovide.co *.weprovide.co
*.m.xn--czrp39c.com *.wildcard.xn--czrp39c.com xn--czrp39c.com *.xn--czrp39c.com