75/100 SECURITY SCORE

Certificate Information

Subject
CN=kingbed.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 10, 2026
Valid Until
December 09, 2026 54 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
62:59:A9:2E:6F:FB:7A:19:BE:78:FC:24:00:4B:9C:D1:D4:C7:3F:D5:35:78:E0:FD:A2:3F:CF:6D:80:F8:3B:B6
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
mortgagecomparisons.com.au *.mortgagecomparisons.com.au *.admin.mortgagecomparisons.com.au *.ww38.mortgagecomparisons.com.au

Other domains in certificate

20463.vip *.20463.vip
avvocatinlinea.it *.avvocatinlinea.it *.random.avvocatinlinea.it
basilandbrine.today *.basilandbrine.today
ccc26285.top *.ccc26285.top
ccc33328.top *.ccc33328.top
costco-outline.com *.costco-outline.com
emy8dmz2hw.world *.emy8dmz2hw.world
fxpornhd.co *.fxpornhd.co *.ww38.fxpornhd.co
jc-w.com.cn *.jc-w.com.cn
*.32.kindhour.info *.app.kindhour.info *.dashboard.kindhour.info *.dev.kindhour.info kindhour.info *.kindhour.info *.portal.kindhour.info *.staging.kindhour.info
kingbed.com.au *.kingbed.com.au *.ns0.kingbed.com.au *.test.kingbed.com.au *.ww25.kingbed.com.au
mdz.bet *.mdz.bet
*.admin.menvgorilla.com *.app.menvgorilla.com *.dev.menvgorilla.com menvgorilla.com *.menvgorilla.com *.panel.menvgorilla.com *.portal.menvgorilla.com *.test.menvgorilla.com *.testing.menvgorilla.com
omegachampion334.top *.omegachampion334.top
oy556.app *.oy556.app
pcbo16.top *.pcbo16.top
propertylawpro.com *.propertylawpro.com
score808.city *.score808.city
sijiucsnpjm.cn *.sijiucsnpjm.cn
srutiqpko.com *.srutiqpko.com
stratoloom.info *.stratoloom.info
suivremalivraison.com *.suivremalivraison.com
summersale.com *.summersale.com
suoweir.xyz *.suoweir.xyz
suoyou.forum *.suoyou.forum
trenavascope.com *.trenavascope.com
truecallermodapk.download *.truecallermodapk.download
tryzebrabi.com *.tryzebrabi.com
tyhnsd.app *.tyhnsd.app
v7777b.app *.v7777b.app
xq8q23a.top *.xq8q23a.top
yvqai.com *.yvqai.com
zk8cnq.top *.zk8cnq.top
zxrmail.com *.zxrmail.com