Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mef.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 28, 2026
Valid Until
December 27, 2026
57 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
46:F2:13:2F:9B:10:3C:04:C2:8A:E5:D2:DF:E0:8E:B0:49:F5:50:E2:D9:80:66:02:E8:50:BC:E2:F0:C8:F6:A5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
zaaax.com.au
*.zaaax.com.au
*.allalarms.zaaax.com.au
*.autodiscover.zaaax.com.au
*.cpcalendars.zaaax.com.au
*.gutenberg.zaaax.com.au
*.lush.zaaax.com.au
*.mail.zaaax.com.au
*.makewebsites.zaaax.com.au
*.mayfair.zaaax.com.au
*.new19.zaaax.com.au
*.retail-store.zaaax.com.au
*.seohub.zaaax.com.au
*.staging.zaaax.com.au
*.streetart.zaaax.com.au
*.surveyman.zaaax.com.au
*.testingonetwo.zaaax.com.au
*.vivid.zaaax.com.au
*.vividtech.zaaax.com.au
*.zaaaaax.zaaax.com.au
*.dashboard.delhi.com.au
delhi.com.au
*.delhi.com.au
*.flows.delhi.com.au
*.gate.delhi.com.au
*.mail02.delhi.com.au
*.mail5.delhi.com.au
*.mail8.delhi.com.au
*.mailrelay.delhi.com.au
*.try.delhi.com.au
discounttire.com.au
*.discounttire.com.au
*.mailin.discounttire.com.au
disease.com.au
*.disease.com.au
*.mail3.disease.com.au
*.mail4.disease.com.au
*.mail9.disease.com.au
*.mailserver.disease.com.au
elizabethleeproperties.com
*.elizabethleeproperties.com
*.www.elizabethleeproperties.com
*.app.iesbpreve.com.br
*.email.iesbpreve.com.br
iesbpreve.com.br
*.iesbpreve.com.br
*.ns3.iesbpreve.com.br
*.ww38.iesbpreve.com.br
*.cpanel.josephswanwebsitedesign.com.au
*.cpcontacts.josephswanwebsitedesign.com.au
*.gatehouselegal.josephswanwebsitedesign.com.au
josephswanwebsitedesign.com.au
*.josephswanwebsitedesign.com.au
*.mail.josephswanwebsitedesign.com.au
*.email.madrid.com.au
*.m.madrid.com.au
madrid.com.au
*.madrid.com.au
*.mail1.madrid.com.au
*.mail2.madrid.com.au
*.mailin.madrid.com.au
*.mailout.madrid.com.au
*.mx.madrid.com.au
*.hostmaster.mef.com.au
mef.com.au
*.mef.com.au
*.mx.mef.com.au
*.httpwww.swiftfurniture.com.au
swiftfurniture.com.au
*.swiftfurniture.com.au
*.ww16.swiftfurniture.com.au
*.crm.waggaaccommodation.com.au
*.mailin.waggaaccommodation.com.au
*.mailx.waggaaccommodation.com.au
waggaaccommodation.com.au
*.waggaaccommodation.com.au
*.blog.ypo.com.au
*.cpanel.ypo.com.au
*.ftp.ypo.com.au
*.imap.ypo.com.au
*.mail.ypo.com.au
*.mailsrv.ypo.com.au
*.mx.ypo.com.au
*.random.ypo.com.au
*.smtp.ypo.com.au
*.smtpauth.ypo.com.au
*.webdisk.ypo.com.au
*.wp.ypo.com.au
ypo.com.au
*.ypo.com.au
Other domains in certificate