Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=restsis.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 25, 2026
Valid Until
December 24, 2026
73 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
2D:09:80:C1:75:45:64:CD:A8:44:83:93:01:47:DC:52:F7:D4:96:72:FA:8D:09:E0:04:31:24:C1:CE:D6:96:A7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
prize.com.au
*.prize.com.au
*.cms.prize.com.au
*.crm.prize.com.au
*.insights.prize.com.au
*.major.prize.com.au
*.staging.prize.com.au
*.ww38.prize.com.au
*.2080-www.mercato.com.br
*.eml.mercato.com.br
*.gran.mercato.com.br
*.insight-hotfix.mercato.com.br
*.internet.mercato.com.br
mercato.com.br
*.mercato.com.br
*.superset.mercato.com.br
*.ww25.mercato.com.br
*.autodiscover.novinhanua.com.br
*.cpcalendars.novinhanua.com.br
*.cpcontacts.novinhanua.com.br
*.dc-fc677ac3d3c3.novinhanua.com.br
*.insight.novinhanua.com.br
novinhanua.com.br
*.novinhanua.com.br
*.random.novinhanua.com.br
*.ww16.novinhanua.com.br
*.ww25.novinhanua.com.br
*.hostmaster.paycor.cm
*.insight-sandbox.paycor.cm
paycor.cm
*.paycor.cm
*.secure.paycor.cm
*.ww38.paycor.cm
*.comune.poppa.com.au
*.insight.poppa.com.au
poppa.com.au
*.poppa.com.au
*.com.pus.com.au
*.insight.pus.com.au
pus.com.au
*.pus.com.au
*.ww25.pus.com.au
*.chat.quickit.com.au
*.demo.quickit.com.au
*.dev.quickit.com.au
*.insight.quickit.com.au
quickit.com.au
*.quickit.com.au
*.random.quickit.com.au
*.report.quickit.com.au
*.ww38.quickit.com.au
*.api.rangenepal.com
rangenepal.com
*.rangenepal.com
*.insight.ravioli.com.au
ravioli.com.au
*.ravioli.com.au
*.backend.reclaimed-wood.com
*.news.reclaimed-wood.com
*.rd.reclaimed-wood.com
reclaimed-wood.com
*.reclaimed-wood.com
*.vpn2.reclaimed-wood.com
*.web.reclaimed-wood.com
*.data.repeat.com.au
*.insights.repeat.com.au
repeat.com.au
*.repeat.com.au
*.wildcard.repeat.com.au
*.ww25.repeat.com.au
*.insight.rescues.com.au
rescues.com.au
*.rescues.com.au
*.ww25.rescues.com.au
*.arrowenergy.reservoir.com.au
*.hunterwater.reservoir.com.au
*.insight-hotfix.reservoir.com.au
reservoir.com.au
*.reservoir.com.au
*.ww38.reservoir.com.au
restsis.com
*.restsis.com
*.staging.restsis.com
*.ww12.restsis.com
*.insight.retrench.com.au
retrench.com.au
*.retrench.com.au
*.insight.shrub.com.au
shrub.com.au
*.shrub.com.au
Other domains in certificate