76/100 SECURITY SCORE

Certificate Information

Subject
CN=umpi.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 18, 2026
Valid Until
August 16, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
27:BF:DD:CE:DC:0D:79:08:84:B1:56:00:F3:42:B0:0D:85:86:C1:10:B5:8F:DB:71:5B:C9:34:A5:08:25:64:B2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
teamfetchasquads.com *.teamfetchasquads.com *.a.teamfetchasquads.com *.admin.teamfetchasquads.com *.api.teamfetchasquads.com *.app.teamfetchasquads.com *.assets.teamfetchasquads.com *.autoconfig.teamfetchasquads.com *.backend.teamfetchasquads.com *.c993c340-c5b3-46a8-8242-8a074c3881d0.teamfetchasquads.com *.cloud.teamfetchasquads.com *.cms.teamfetchasquads.com *.demo.teamfetchasquads.com *.dns.teamfetchasquads.com *.es.teamfetchasquads.com *.files.teamfetchasquads.com *.ftp.teamfetchasquads.com *.gate.teamfetchasquads.com *.gateway.teamfetchasquads.com *.imap.teamfetchasquads.com *.mail.teamfetchasquads.com *.mail01.teamfetchasquads.com *.mailin2.teamfetchasquads.com *.members.teamfetchasquads.com *.mobile.teamfetchasquads.com *.mx.teamfetchasquads.com *.mx1.teamfetchasquads.com *.out.teamfetchasquads.com *.panel.teamfetchasquads.com *.posta.teamfetchasquads.com *.postmaster.teamfetchasquads.com *.rd.teamfetchasquads.com *.rds.teamfetchasquads.com *.rdweb.teamfetchasquads.com *.remote.teamfetchasquads.com *.root.teamfetchasquads.com *.shop.teamfetchasquads.com *.sitemap.teamfetchasquads.com *.smtp.teamfetchasquads.com *.status.teamfetchasquads.com *.test.teamfetchasquads.com *.vdi.teamfetchasquads.com *.wp.teamfetchasquads.com *.ygfsbixz.teamfetchasquads.com

Other domains in certificate

businessworld.xyz *.businessworld.xyz
certifiedelectrician.com.au *.certifiedelectrician.com.au
datastack.com.au *.datastack.com.au *.ww17.datastack.com.au
dstev.de *.dstev.de
ejaculate.com.au *.ejaculate.com.au *.ww25.ejaculate.com.au
kansei-kachi.com *.kansei-kachi.com *.random.kansei-kachi.com
livetestingdomain.rest *.livetestingdomain.rest
*.airflow.modernspaceband.com *.graph.modernspaceband.com *.kursk.modernspaceband.com modernspaceband.com *.modernspaceband.com
mycardepot.com *.mycardepot.com
traveller.xyz *.traveller.xyz
*.36.umpi.org umpi.org *.umpi.org
wageningenwaterconference.com *.wageningenwaterconference.com *.ww38.wageningenwaterconference.com
*.lime.worldofworklawblog.com *.random.worldofworklawblog.com worldofworklawblog.com *.worldofworklawblog.com *.www.worldofworklawblog.com
*.random.ydyse6.com *.wildcard.ydyse6.com *.ww38.ydyse6.com *.www.ydyse6.com ydyse6.com *.ydyse6.com