Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=t4esmartit.net
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 06, 2026
Valid Until
August 04, 2026 49 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:6A:D7:F9:B4:F2:D8:F2:62:72:5B:B8:9E:01:CE:10:ED:37:AF:4C:60:FD:19:5C:80:04:10:D0:17:7E:C4:55
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
objbanlagpi.com *.objbanlagpi.com

Other domains in certificate

bank.pink *.bank.pink *.citi.bank.pink *.deniz.bank.pink *.denzel.bank.pink *.heizwerkedaten.bank.pink *.hnbbank.bank.pink *.infra.bank.pink *.kommunal.bank.pink *.qmdaten.bank.pink *.sagicor.bank.pink *.tourismus.bank.pink *.vkb.bank.pink *.ww25.bank.pink
bostnitro.online *.bostnitro.online
bouncyball.io *.bouncyball.io
bumpershellz.com *.bumpershellz.com *.random.bumpershellz.com
casadelfriuli.com *.casadelfriuli.com
cllkme.com *.cllkme.com *.ffffffffffff.cllkme.com *.random.cllkme.com
coolcarparts.com *.coolcarparts.com
*.2.dev2.website dev2.website *.dev2.website
dtuarkqunodf.com *.dtuarkqunodf.com
fuhan501.live *.fuhan501.live *.ww25.fuhan501.live
lightscapesnflorida.com *.lightscapesnflorida.com *.ww38.lightscapesnflorida.com
mwb.au *.mwb.au
ostimg.cc *.ostimg.cc *.p.ostimg.cc
*.admin.pemula88.click pemula88.click *.pemula88.click
ramen-manri.com *.ramen-manri.com
*.random.resinmarble.au resinmarble.au *.resinmarble.au
*.random.ringtone.au ringtone.au *.ringtone.au
*.random.safinna.live safinna.live *.safinna.live
spaceexplorationtechnologies.com.au *.spaceexplorationtechnologies.com.au
t4esmartit.net *.t4esmartit.net *.ww25.t4esmartit.net
*.comune.tingsredlantern.com *.hostmaster.tingsredlantern.com *.niwolucreatiophostmaster.tingsredlantern.com tingsredlantern.com *.tingsredlantern.com *.ww5.tingsredlantern.com *.ww6.tingsredlantern.com
typehash.com *.typehash.com *.www.typehash.com
uniccamera.com *.uniccamera.com
water2you.com.au *.water2you.com.au
watersedgenorthcaroli.com *.watersedgenorthcaroli.com
whoper.net *.whoper.net
*.random.womenswatches.de womenswatches.de *.womenswatches.de
*.random.zend.au zend.au *.zend.au