75/100 SECURITY SCORE

Certificate Information

Subject
CN=nobre.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 23, 2026
Valid Until
January 21, 2027 88 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
1C:44:89:6B:90:D2:57:EC:3B:B7:0E:02:D5:4D:F5:CD:79:45:52:A9:06:CF:2E:57:34:D8:42:8B:C2:16:3D:43
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
seremet.com *.seremet.com *.app.seremet.com *.apps.seremet.com *.blog.seremet.com *.bmrbgmails.seremet.com *.desktop.seremet.com *.docs.seremet.com *.external.seremet.com *.ftp.seremet.com *.intranet.seremet.com *.mail.seremet.com *.mails.seremet.com *.mta-sts.seremet.com *.my.seremet.com *.portal.seremet.com *.public.seremet.com *.realestate.seremet.com *.sharepoint.seremet.com *.shop.seremet.com *.smtp.seremet.com *.store.seremet.com *.www1.seremet.com *.zimbra.seremet.com

Other domains in certificate

abshir.net *.abshir.net *.awecdowa.abshir.net *.bbs.abshir.net *.connect.abshir.net *.demo.abshir.net *.dev.abshir.net *.ftp.abshir.net *.officevpn.abshir.net *.owa.abshir.net *.sslvpn.abshir.net *.studentsvpn.abshir.net *.vpn.abshir.net *.vpnssl.abshir.net *.wildcard.abshir.net
*.accounts.downloaderic.com *.blog.downloaderic.com *.br.downloaderic.com *.com.downloaderic.com *.crickipl.downloaderic.com downloaderic.com *.downloaderic.com *.link.downloaderic.com *.receitas.downloaderic.com *.us.downloaderic.com
*.football.gta-5-pc-download.com *.german.gta-5-pc-download.com gta-5-pc-download.com *.gta-5-pc-download.com *.insights.gta-5-pc-download.com *.press.gta-5-pc-download.com *.school.gta-5-pc-download.com *.wss.gta-5-pc-download.com *.ww1.gta-5-pc-download.com
*.com.hopikotr.com hopikotr.com *.hopikotr.com
*.cpanel.mustardseed.uk.com *.m.mustardseed.uk.com *.mail.mustardseed.uk.com mustardseed.uk.com *.mustardseed.uk.com *.webdisk.mustardseed.uk.com *.webmail.mustardseed.uk.com
*.777.nobre.com *.casas.nobre.com *.jv.nobre.com nobre.com *.nobre.com *.outlook.nobre.com *.su.nobre.com *.tu.nobre.com *.ww01.nobre.com
*.dashboard.ocano.com *.gitlab.ocano.com *.global.ocano.com *.mx.ocano.com ocano.com *.ocano.com *.remoteapp.ocano.com
*.085ok.shgajy.com *.0ddi7.shgajy.com *.7od2l.shgajy.com shgajy.com *.shgajy.com