75/100 SECURITY SCORE

Certificate Information

Subject
CN=mef.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 28, 2026
Valid Until
December 27, 2026 57 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
46:F2:13:2F:9B:10:3C:04:C2:8A:E5:D2:DF:E0:8E:B0:49:F5:50:E2:D9:80:66:02:E8:50:BC:E2:F0:C8:F6:A5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
zaaax.com.au *.zaaax.com.au *.allalarms.zaaax.com.au *.autodiscover.zaaax.com.au *.cpcalendars.zaaax.com.au *.gutenberg.zaaax.com.au *.lush.zaaax.com.au *.mail.zaaax.com.au *.makewebsites.zaaax.com.au *.mayfair.zaaax.com.au *.new19.zaaax.com.au *.retail-store.zaaax.com.au *.seohub.zaaax.com.au *.staging.zaaax.com.au *.streetart.zaaax.com.au *.surveyman.zaaax.com.au *.testingonetwo.zaaax.com.au *.vivid.zaaax.com.au *.vividtech.zaaax.com.au *.zaaaaax.zaaax.com.au

Other domains in certificate

*.dashboard.delhi.com.au delhi.com.au *.delhi.com.au *.flows.delhi.com.au *.gate.delhi.com.au *.mail02.delhi.com.au *.mail5.delhi.com.au *.mail8.delhi.com.au *.mailrelay.delhi.com.au *.try.delhi.com.au
discounttire.com.au *.discounttire.com.au *.mailin.discounttire.com.au
disease.com.au *.disease.com.au *.mail3.disease.com.au *.mail4.disease.com.au *.mail9.disease.com.au *.mailserver.disease.com.au
elizabethleeproperties.com *.elizabethleeproperties.com *.www.elizabethleeproperties.com
*.app.iesbpreve.com.br *.email.iesbpreve.com.br iesbpreve.com.br *.iesbpreve.com.br *.ns3.iesbpreve.com.br *.ww38.iesbpreve.com.br
*.cpanel.josephswanwebsitedesign.com.au *.cpcontacts.josephswanwebsitedesign.com.au *.gatehouselegal.josephswanwebsitedesign.com.au josephswanwebsitedesign.com.au *.josephswanwebsitedesign.com.au *.mail.josephswanwebsitedesign.com.au
*.email.madrid.com.au *.m.madrid.com.au madrid.com.au *.madrid.com.au *.mail1.madrid.com.au *.mail2.madrid.com.au *.mailin.madrid.com.au *.mailout.madrid.com.au *.mx.madrid.com.au
*.hostmaster.mef.com.au mef.com.au *.mef.com.au *.mx.mef.com.au
*.httpwww.swiftfurniture.com.au swiftfurniture.com.au *.swiftfurniture.com.au *.ww16.swiftfurniture.com.au
*.crm.waggaaccommodation.com.au *.mailin.waggaaccommodation.com.au *.mailx.waggaaccommodation.com.au waggaaccommodation.com.au *.waggaaccommodation.com.au
*.blog.ypo.com.au *.cpanel.ypo.com.au *.ftp.ypo.com.au *.imap.ypo.com.au *.mail.ypo.com.au *.mailsrv.ypo.com.au *.mx.ypo.com.au *.random.ypo.com.au *.smtp.ypo.com.au *.smtpauth.ypo.com.au *.webdisk.ypo.com.au *.wp.ypo.com.au ypo.com.au *.ypo.com.au