SSL Certificate Analysis for mx.1uptime.world - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=florest4sale.com

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

April 13, 2026

Valid Until

July 12, 2026 38 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

91:AF:D5:BE:FE:15:88:1A:67:27:C5:86:55:D8:C8:7B:23:32:C7:98:95:A8:01:2C:8F:F6:DB:B6:14:3E:B6:B0

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

1uptime.world *.1uptime.world *.ww38.1uptime.world

Other domains in certificate

02ballonvaarten.be *.02ballonvaarten.be

alternativapolitica.it *.alternativapolitica.it *.bigdata.alternativapolitica.it *.metric.alternativapolitica.it

*.admin.bytewrath.zone *.api.bytewrath.zone *.app.bytewrath.zone *.assets.bytewrath.zone *.beta.bytewrath.zone bytewrath.zone *.bytewrath.zone *.dev.bytewrath.zone *.membros.bytewrath.zone *.search.bytewrath.zone *.services.bytewrath.zone *.staging.bytewrath.zone *.tajnbproxy.bytewrath.zone *.testing.bytewrath.zone *.ww0.bytewrath.zone

*.assets.claim-cloud.com claim-cloud.com *.claim-cloud.com *.v2.claim-cloud.com

cryotime.info *.cryotime.info *.m.cryotime.info

*.blt.eprosno.com *.cpanel.eprosno.com *.demo.eprosno.com eprosno.com *.eprosno.com *.jantechaai.eprosno.com

fashiontv.co *.fashiontv.co *.ww25.fashiontv.co

florest4sale.com *.florest4sale.com *.flycam-48a.florest4sale.com *.running-shorts-36b.florest4sale.com *.screen-protector.florest4sale.com *.slip-on-flat-shoes.florest4sale.com *.water-heater.florest4sale.com

informationcr.com *.informationcr.com *.ww38.informationcr.com

lanafox.com *.lanafox.com *.stage.lanafox.com *.stardancejones.lanafox.com *.ww16.lanafox.com

*.app.rifaonlinedasorte.com.br *.online.rifaonlinedasorte.com.br rifaonlinedasorte.com.br *.rifaonlinedasorte.com.br

s-dev.org *.s-dev.org *.ww38.s-dev.org

*.random.toutadomicile.com toutadomicile.com *.toutadomicile.com *.ww25.toutadomicile.com

*.testing.wirbelsaeulenverletzung.de wirbelsaeulenverletzung.de *.wirbelsaeulenverletzung.de

*.webmail.wwwutilitiesinfo.com *.ww25.wwwutilitiesinfo.com wwwutilitiesinfo.com *.wwwutilitiesinfo.com