Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=fertilityconnections.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 13, 2026
Valid Until
December 12, 2026 53 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
1E:50:76:9F:EA:E9:39:25:09:73:71:8A:85:BC:28:AA:73:35:06:C1:59:97:C1:4C:53:36:E3:9D:C7:DF:B9:BD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

84 domains
kat.mn *.kat.mn *.ada.kat.mn *.cdn.kat.mn *.krj.kat.mn *.ww25.kat.mn

Other domains in certificate

4nixa.net *.4nixa.net *.api.4nixa.net
8899win.xyz *.8899win.xyz
aladdincleaning.co.uk *.aladdincleaning.co.uk
buzzer.sbs *.buzzer.sbs
comfortsuitesbentonville.com *.comfortsuitesbentonville.com
crycrycry.com *.crycrycry.com
cyborgs.co.uk *.cyborgs.co.uk
doublesdistributors.com *.doublesdistributors.com
elevenweddings.com *.elevenweddings.com
essencenailsanddayspa.com *.essencenailsanddayspa.com
ezzytreeservice.com *.ezzytreeservice.com
*.dash.fertilityconnections.com.au fertilityconnections.com.au *.fertilityconnections.com.au *.website.fertilityconnections.com.au *.ww17.fertilityconnections.com.au *.ww25.fertilityconnections.com.au *.ww38.fertilityconnections.com.au *.www.fertilityconnections.com.au
futurhealth.co *.futurhealth.co
hattersdriving.co.uk *.hattersdriving.co.uk
hauliers.uk *.hauliers.uk
hazymoon.co.uk *.hazymoon.co.uk
heraldrystudies.store *.heraldrystudies.store
loandataroom.com *.loandataroom.com
myndtalk.org *.myndtalk.org *.updentity.myndtalk.org
*.mail.naturalgems.co.uk naturalgems.co.uk *.naturalgems.co.uk
peppermillwc.com *.peppermillwc.com
soyprint.net *.soyprint.net *.ww38.soyprint.net
spettacolari.com *.spettacolari.com
taxlaws.com.au *.taxlaws.com.au
teachcable.com *.teachcable.com
teammanager.co.uk *.teammanager.co.uk
*.random.templesflorist.com templesflorist.com *.templesflorist.com
*.areaclienti.tivsat.tv tivsat.tv *.tivsat.tv
upgrademyboiler.co.uk *.upgrademyboiler.co.uk
weddingtraders.com.au *.weddingtraders.com.au
*.admin.wesleyinternationalschool.online wesleyinternationalschool.online *.wesleyinternationalschool.online
witv.store *.witv.store *.ww38.witv.store