76/100 SECURITY SCORE

Certificate Information

Subject
CN=8090567.me
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 17, 2026
Valid Until
July 16, 2026 58 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B8:77:3F:07:E3:6B:D7:FF:CA:65:FE:93:84:F4:5A:2C:D6:85:9A:FC:5E:35:95:67:6F:16:8B:D4:58:9C:1E:D0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
wishshirts.com *.wishshirts.com *.77f6f78b-1491-46cb-9700-bf200a29699a.wishshirts.com *.bjhecmpf.wishshirts.com *.plqdrserver1.wishshirts.com

Other domains in certificate

8090567.me *.8090567.me *.cloud.8090567.me *.wildcard.8090567.me *.ww25.8090567.me
a2aalerts.com *.a2aalerts.com *.adm.a2aalerts.com *.app.a2aalerts.com *.assets.a2aalerts.com *.cloud.a2aalerts.com
adaywiththehomies.com *.adaywiththehomies.com *.new.adaywiththehomies.com
andhra.cc *.andhra.cc
birthstone.com.au *.birthstone.com.au *.ww25.birthstone.com.au
chilcotinbuilder.com *.chilcotinbuilder.com
coaching.bio *.coaching.bio *.desiree.coaching.bio
cursostopbrasil.site *.cursostopbrasil.site
e20ef.com *.e20ef.com
equus.cfd *.equus.cfd
fauzihidayati.cfd *.fauzihidayati.cfd
jambia3.click *.jambia3.click
*.blog.kivsa.sbs kivsa.sbs *.kivsa.sbs *.wildcard.kivsa.sbs
lumenox.info *.lumenox.info
*.fe.lustmaal.online *.gitlab.lustmaal.online lustmaal.online *.lustmaal.online *.mww12.lustmaal.online *.ww12.lustmaal.online *.ww7.lustmaal.online *.www.lustmaal.online
mioro-subs.pl *.mioro-subs.pl
*.28b0ab7d-9d10-4e29-9cd0-21a974da8a4e.paket-limpol-17.xyz *.525v4.paket-limpol-17.xyz *.hostmaster.paket-limpol-17.xyz *.kwid9.paket-limpol-17.xyz *.members.paket-limpol-17.xyz paket-limpol-17.xyz *.paket-limpol-17.xyz *.qdiek.paket-limpol-17.xyz *.rczhl.paket-limpol-17.xyz *.snx68.paket-limpol-17.xyz *.test.paket-limpol-17.xyz *.webshop.paket-limpol-17.xyz *.wsct4.paket-limpol-17.xyz
*.56p.ptcn.org *.8t2l.ptcn.org ptcn.org *.ptcn.org
richmails.com *.richmails.com
*.admin.rvaa.com.au *.analytics.rvaa.com.au *.production.rvaa.com.au rvaa.com.au *.rvaa.com.au *.ww25.rvaa.com.au
*.random.thecountryfrench.com thecountryfrench.com *.thecountryfrench.com *.ww25.thecountryfrench.com
*.api.thescientist.online *.aym4u7f6e6gfgvxu.thescientist.online thescientist.online *.thescientist.online *.wildcard.thescientist.online *.ww25.thescientist.online