76/100 SECURITY SCORE

Certificate Information

Subject
CN=sunnyvalepads.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 23, 2026
Valid Until
September 21, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8E:77:1B:25:3E:CC:FA:CF:FA:64:AC:09:9D:5D:BB:AF:79:E2:08:60:66:0A:AA:0D:68:9B:A9:60:BA:9F:AC:78
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
theflowzone.net *.theflowzone.net *.mail.theflowzone.net *.random.theflowzone.net *.ww25.theflowzone.net *.www.theflowzone.net

Other domains in certificate

*.beta.britai.com britai.com *.britai.com *.demo.britai.com *.forums.britai.com *.help.britai.com *.hostmaster.britai.com *.in.britai.com *.vpn.britai.com *.ww1.britai.com *.ww11.britai.com *.ww16.britai.com *.ww17.britai.com *.ww25.britai.com *.ww38.britai.com *.www.britai.com
dirtydaiting.com *.dirtydaiting.com *.wildcard.dirtydaiting.com *.ww16.dirtydaiting.com
emmainbromley.co.uk *.emmainbromley.co.uk
facein.it *.facein.it
*.bg.fizzyslim.biz *.compoland.fizzyslim.biz *.es.fizzyslim.biz *.espa.fizzyslim.biz fizzyslim.biz *.fizzyslim.biz *.fr.fizzyslim.biz *.gr.fizzyslim.biz *.poland.fizzyslim.biz *.ww38.fizzyslim.biz
hertsnhsgreattogether.co.uk *.hertsnhsgreattogether.co.uk
*.autodiscover.parentela.it *.hostmaster.parentela.it parentela.it *.parentela.it *.ww1.parentela.it
*.admin.reinvention.it reinvention.it *.reinvention.it
*.closethegap.studiometric.co *.do-better.studiometric.co studiometric.co *.studiometric.co
sunnyvalepads.com *.sunnyvalepads.com
*.api.tawian.com *.client.tawian.com *.connectvpn.tawian.com *.eye.tawian.com *.gateway.tawian.com *.hostmaster.tawian.com *.login.tawian.com *.m.tawian.com *.office.tawian.com *.pixel.tawian.com *.portal.tawian.com *.remoteaccess.tawian.com *.secureaccess.tawian.com *.ssl.tawian.com *.stape.tawian.com tawian.com *.tawian.com *.transparencia.tawian.com *.vpn.tawian.com *.vpn1.tawian.com *.vpn2.tawian.com *.web.tawian.com *.webconnect.tawian.com *.webvpn.tawian.com
*.www.xxor.info xxor.info *.xxor.info *.zfoa.xxor.info
*.u1g9.yd888.me yd888.me *.yd888.me