75/100 SECURITY SCORE

Certificate Information

Subject
CN=worldmail.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026 66 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F9:28:B5:C2:38:74:09:D8:91:19:8F:0F:84:68:DD:2C:EC:97:F4:38:6F:BF:A5:08:F4:DC:0B:66:5C:F5:66:40
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
adelaidealive.au *.adelaidealive.au *.news.adelaidealive.au *.ww25.adelaidealive.au

Other domains in certificate

0123movies.ltd *.0123movies.ltd *.comw3.0123movies.ltd *.staging.0123movies.ltd *.w.0123movies.ltd *.w3.0123movies.ltd
aiia.in *.aiia.in *.gov.aiia.in *.novo.aiia.in
beautyandnails.com.au *.beautyandnails.com.au *.news.beautyandnails.com.au *.ww38.beautyandnails.com.au
chargeandgo.com.au *.chargeandgo.com.au *.emv1.chargeandgo.com.au *.news.chargeandgo.com.au *.wildcard.chargeandgo.com.au *.ww16.chargeandgo.com.au *.ww25.chargeandgo.com.au *.ww38.chargeandgo.com.au *.www.chargeandgo.com.au
*.3g.dreamticket.com.au dreamticket.com.au *.dreamticket.com.au *.mx1.dreamticket.com.au *.news.dreamticket.com.au *.ww38.dreamticket.com.au
*.cicd.greasers.com.au greasers.com.au *.greasers.com.au
*.com.insecurity.com.au *.dk.insecurity.com.au *.fi.insecurity.com.au insecurity.com.au *.insecurity.com.au *.lt.insecurity.com.au *.portal.insecurity.com.au *.se.insecurity.com.au
*.comune.itsa.com.au itsa.com.au *.itsa.com.au *.mx02.itsa.com.au
kjweio.top *.kjweio.top
*.imap.mestredainformatica.com.br *.imap4.mestredainformatica.com.br mestredainformatica.com.br *.mestredainformatica.com.br *.ww16.mestredainformatica.com.br *.ww17.mestredainformatica.com.br *.ww25.mestredainformatica.com.br
*.hostmaster.munbet.mobi *.m.munbet.mobi munbet.mobi *.munbet.mobi
*.chat.onlinediplomas.com.au *.email.onlinediplomas.com.au *.mailgw.onlinediplomas.com.au onlinediplomas.com.au *.onlinediplomas.com.au
*.chat.pranks.com.au pranks.com.au *.pranks.com.au *.ww25.pranks.com.au
*.admin.thatonebot.site *.staging.thatonebot.site *.test.thatonebot.site thatonebot.site *.thatonebot.site *.wanderwood.thatonebot.site *.wood.thatonebot.site
*.accounts.v9.com.au *.image.v9.com.au *.mailserver.v9.com.au v9.com.au *.v9.com.au *.ww25.v9.com.au
*.email.worldmail.com.au *.imap.worldmail.com.au *.mx1.worldmail.com.au *.remote.worldmail.com.au worldmail.com.au *.worldmail.com.au