Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=kzgamer.site
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 15, 2025
Valid Until
March 15, 2026
37 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
27:5D:15:9E:C3:73:25:ED:A5:07:D6:5B:ED:F8:DF:37:B5:E1:BC:A4:74:5C:77:27:86:08:14:CB:B4:05:C6:FC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
mayflorida.com
*.mayflorida.com
*.ahca.mayflorida.com
*.deo.mayflorida.com
*.dms.mayflorida.com
*.elections.mayflorida.com
*.wildcard.mayflorida.com
68iwinclub2.bet
*.68iwinclub2.bet
777xk138.cc
*.777xk138.cc
accordforms.com
*.accordforms.com
*.boss.accordforms.com
*.mta.accordforms.com
caftsy.com
*.caftsy.com
crivben.xyz
*.crivben.xyz
*.d.crivben.xyz
fortheloveofink.com.au
*.fortheloveofink.com.au
ideally.company
*.ideally.company
jericooficial.com.br
*.jericooficial.com.br
*.431ec.kzgamer.site
*.ceg.kzgamer.site
*.dilr.kzgamer.site
*.f35e4.kzgamer.site
*.f4e96bb1.kzgamer.site
*.fux.kzgamer.site
*.fyw.kzgamer.site
*.gemb.kzgamer.site
*.gynu.kzgamer.site
*.has.kzgamer.site
*.kor.kzgamer.site
*.kulr.kzgamer.site
kzgamer.site
*.kzgamer.site
*.nef.kzgamer.site
*.podk.kzgamer.site
*.rem.kzgamer.site
*.rokk.kzgamer.site
*.rx.kzgamer.site
*.seb.kzgamer.site
*.store.kzgamer.site
*.summ.kzgamer.site
*.tew.kzgamer.site
*.vuc.kzgamer.site
*.xact.kzgamer.site
*.xaz.kzgamer.site
*.xet.kzgamer.site
*.xid.kzgamer.site
*.zyg.kzgamer.site
lotteberk.co.uk
*.lotteberk.co.uk
*.nmail.lotteberk.co.uk
*.mail.menanggacor.site
menanggacor.site
*.menanggacor.site
mlnk.au
*.mlnk.au
moonpapy.com
*.moonpapy.com
*.demo.namastespiceland.us
*.hostmaster.namastespiceland.us
namastespiceland.us
*.namastespiceland.us
*.preprod.namastespiceland.us
*.qa-ci.namastespiceland.us
*.vpn.namastespiceland.us
*.ww25.namastespiceland.us
*.cpanel.phimsex.life
*.mail.phimsex.life
phimsex.life
*.phimsex.life
*.sitemap.phimsex.life
snaptube.blog
*.snaptube.blog
*.analytic.turnstone.bio
*.analytics.turnstone.bio
turnstone.bio
*.turnstone.bio
*.uat.turnstone.bio
*.webmail.turnstone.bio
*.www.turnstone.bio
*.1m.v4b.site
v4b.site
*.v4b.site
Other domains in certificate