75/100 SECURITY SCORE

Certificate Information

Subject
CN=thestaysafe.shop
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 09, 2026
Valid Until
February 07, 2027 89 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
4C:03:81:85:C9:44:86:5F:EB:BF:96:F2:8C:3C:88:7E:20:1B:7B:56:DA:F5:51:DF:2C:AB:AE:3E:65:09:1F:85
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

76 domains
tinghaode123.com *.tinghaode123.com *.forums.tinghaode123.com *.news.tinghaode123.com *.shop.tinghaode123.com

Other domains in certificate

contentserviceinfoprocenter.site *.contentserviceinfoprocenter.site
fixify.world *.fixify.world
*.admin.hardwoodfactory.com *.analytics.hardwoodfactory.com *.api.hardwoodfactory.com *.app.hardwoodfactory.com *.argo.hardwoodfactory.com *.backend.hardwoodfactory.com *.backup.hardwoodfactory.com *.beta.hardwoodfactory.com *.blog.hardwoodfactory.com *.crm.hardwoodfactory.com *.dashboard.hardwoodfactory.com *.demo.hardwoodfactory.com *.dev.hardwoodfactory.com *.flw.hardwoodfactory.com *.forum.hardwoodfactory.com *.forums.hardwoodfactory.com hardwoodfactory.com *.hardwoodfactory.com *.help.hardwoodfactory.com *.hostmaster.hardwoodfactory.com *.m.hardwoodfactory.com *.new.hardwoodfactory.com *.old.hardwoodfactory.com *.pfutahelp.hardwoodfactory.com *.portal.hardwoodfactory.com *.rdweb.hardwoodfactory.com *.remote.hardwoodfactory.com *.report.hardwoodfactory.com *.shop.hardwoodfactory.com *.staging.hardwoodfactory.com *.store.hardwoodfactory.com *.superset.hardwoodfactory.com *.temp.hardwoodfactory.com *.test.hardwoodfactory.com *.vpn.hardwoodfactory.com *.wiki.hardwoodfactory.com *.workflow.hardwoodfactory.com *.ydgqmworkflow.hardwoodfactory.com
hd2movie.com *.hd2movie.com *.ww38.hd2movie.com
*.cdn.nanrenbense48571.buzz *.login.nanrenbense48571.buzz nanrenbense48571.buzz *.nanrenbense48571.buzz *.testing.nanrenbense48571.buzz *.ww17.nanrenbense48571.buzz
*.cpcalendars.paulsmithphotography.com.au paulsmithphotography.com.au *.paulsmithphotography.com.au *.ww38.paulsmithphotography.com.au
*.app.razvlekuha.club razvlekuha.club *.razvlekuha.club *.secure.razvlekuha.club
*.32.reservation.life *.airflow.reservation.life *.prod.reservation.life reservation.life *.reservation.life *.superset.reservation.life
*.comwww.tdty.com tdty.com *.tdty.com
thestaysafe.shop *.thestaysafe.shop *.ww38.thestaysafe.shop