Open
Cached
·
just now
89/100
SECURITY SCORE
Certificate Information
Subject
CN=mail.thefoothills.church
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
November 14, 2025
Valid Until
February 12, 2026
80 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4F:E6:77:92:6F:04:BF:63:36:D9:87:5C:43:31:76:0E:96:AE:DF:9A:F5:C0:96:C8:7C:3D:DF:D3:C1:DA:0C:7C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
84 domains
mail.metricas.net
mail.1dsa.com
mail.abodeorigin.com
mail.adamcarbons.com
mail.aplusgm.com
mail.arkgisinc.com
mail.bensbeauty.com
mail.bloomard.com
mail.brand-tonic.com
mail.bulldogmetals.net
mail.callemexico.ca
mail.cctv.mu
mail.cedilotte.com
mail.chartei.com
mail.tunas-engineering.co.id
securemail.anupindi.co.in
mail.akros.co.tz
mail.codelogicsoftware.com
email.multipack.com.ph
login.emcc.com.ph
mail.ctrlxmedia.pro
mail.cuanticore.com
mail.cyberchem.co.za
mail.desanjose.net
mail.dhgindy.com
mail.dimick.net
mail.distribuidoraaguirre.cl
mail.dmservicesandsupply.com
mail.dofenergy.com
mail.dsptafrica.com
mail.earlmontessori.co
webmail.eternimax.com
mail.filamidaho.org
mail.frplus.net
mail.fundgroom.com
mail.galanter.com
mail.geoidtechnologies.com
webmail.nari.gov.pg
mail.govarks.com
mail.gridx.ge
mail.happyabby.fun
mail.hts.care
mail.ibcorp-ph.com
webmail.dinamicaindustrial.ind.br
login.inferlocal.ai
mail.interrix.com
mail.invbatach.com
mail.issuerservices.us
email.jar-group.com
mail.jwdepere.org
webmail.kcigroup.ae
mail.korutest.com
mail.kovars.net
webmail.livesedona.com
mail.loki.net
mail.mad-swan.com
mail.363.ru
mail.maquinariamyh.com
mail.northcalgaryfc.com
mail.noteskeeper.ru
mail.nystroms.org
mail.powerz.gr
login.proyectoscsi.mx
mail.qualityfarmsllc.com
mail.randrmachineworks.com
mail.realcleardata.info
mail.recovery-accountants.com
mail.rmtjute.com
mail.roadsoupks.com
mail.saihalmaghsar.com
mail.sandyrizzo.com
mail.shehrazad.org
mail.smjtechonline.com
mail.strpdv.com
mail.telnet-isp.com
mail.thecoffeeclubme.com
mail.thefoothills.church
mail.thongtarinhotel.com
mail.tillotson.me
login.tradbow.com
mail.tuvozmobile.com
mail.unicornprecitech.com
correo.vypbusiness.com
mail.zipbench.com
Other domains in certificate