76/100 SECURITY SCORE

Certificate Information

Subject
CN=foil.com.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 20, 2025
Valid Until
March 20, 2026 35 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:28:9B:5A:C5:17:CF:61:40:7B:43:B4:B1:DB:AF:EC:14:01:9F:67:52:51:1D:8C:06:61:C4:83:A6:53:AF:5F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
pcontentdelivery.info *.pcontentdelivery.info

Other domains in certificate

323steamboat.info *.323steamboat.info
allofyourinterests.info *.allofyourinterests.info
allthingshealing.info *.allthingshealing.info
areejalwabil.info *.areejalwabil.info
arizonaforeclosuresearch.info *.arizonaforeclosuresearch.info
athyimemediates.info *.athyimemediates.info
catholicapologetic.info *.catholicapologetic.info
crowned.com.au *.crowned.com.au *.internal.crowned.com.au
digitalhermes.com *.digitalhermes.com *.drsw.digitalhermes.com *.ehwoc.digitalhermes.com *.mapsciences.digitalhermes.com *.medicaltourismtraveller.digitalhermes.com *.qlmc.digitalhermes.com *.questionnaire.digitalhermes.com
endpoliticalbribery.org *.endpoliticalbribery.org
esignificanvi.info *.esignificanvi.info
foil.com.au *.foil.com.au
gtdjidencenha.info *.gtdjidencenha.info
indiatime.info *.indiatime.info
jill.com.au *.jill.com.au *.mail.jill.com.au *.mx.jill.com.au *.random.jill.com.au
lawrenceeagletribune.com *.lawrenceeagletribune.com
llbeansrewards.com *.llbeansrewards.com
murat.store *.murat.store
newguestrows-ver1f1c.info *.newguestrows-ver1f1c.info
numiroyalfamily.org *.numiroyalfamily.org
*.hostmaster.prepaidcardsatus.com prepaidcardsatus.com *.prepaidcardsatus.com
privateannuity.info *.privateannuity.info
prophet-invest.com *.prophet-invest.com
rbauhaus.info *.rbauhaus.info
rial.digital *.rial.digital
rivilistsp.info *.rivilistsp.info
roi100.info *.roi100.info
rvegetabookc.info *.rvegetabookc.info
samoan.net *.samoan.net
saveranewskashi.com *.saveranewskashi.com
shary.store *.shary.store
shortsale.co.za *.shortsale.co.za
sinnersclothing.co *.sinnersclothing.co
stamped.com.au *.stamped.com.au
sxtv.live *.sxtv.live
sydneyrentalcar.com.au *.sydneyrentalcar.com.au
xbimg.info *.xbimg.info
yslusalab.com *.yslusalab.com