Open
Cached
·
just now
78/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=banasthali.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 14, 2026
Valid Until
January 12, 2027
73 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
36:C5:BB:92:3B:AB:22:F6:3D:75:32:85:57:47:1A:40:ED:BA:D5:89:3F:E0:EF:71:5E:B7:39:A3:2B:DB:F9:4B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
banasthali.com
*.banasthali.com
*.client.banasthali.com
*.mobile.banasthali.com
*.org.banasthali.com
*.remote.banasthali.com
*.remoto.banasthali.com
*.vpn.banasthali.com
*.vpn1.banasthali.com
*.webconnect.banasthali.com
*.wildcard.banasthali.com
*.ww12.banasthali.com
8x8.live
*.8x8.live
*.cceng.8x8.live
*.fwd.8x8.live
*.ww38.8x8.live
ace365.bet
*.ace365.bet
*.csobi62586621.ace365.bet
*.lugmpgboig.ace365.bet
automytion.info
*.automytion.info
*.dev.automytion.info
*.analytics.catsbanned.co.uk
catsbanned.co.uk
*.catsbanned.co.uk
*.production.catsbanned.co.uk
*.redash.catsbanned.co.uk
*.admin.offshore.market
offshore.market
*.offshore.market
*.1www.peefectgirls.net
*.admin.peefectgirls.net
*.api.peefectgirls.net
*.app.peefectgirls.net
*.bi.peefectgirls.net
*.dash.peefectgirls.net
*.demo.peefectgirls.net
*.dev.peefectgirls.net
*.fr.peefectgirls.net
*.internal.peefectgirls.net
*.ipad.peefectgirls.net
*.m.peefectgirls.net
*.notexistsm.peefectgirls.net
peefectgirls.net
*.peefectgirls.net
*.random.peefectgirls.net
*.redash.peefectgirls.net
*.remote.peefectgirls.net
*.reporting.peefectgirls.net
*.superset.peefectgirls.net
*.vpn.peefectgirls.net
*.wwr.peefectgirls.net
*.www.peefectgirls.net
*.wwww.peefectgirls.net
*.mx.quitequirky.co.uk
quitequirky.co.uk
*.quitequirky.co.uk
*.dashboard.residentapp.com
*.for.residentapp.com
*.iotas.residentapp.com
*.mobile.residentapp.com
residentapp.com
*.residentapp.com
*.www.residentapp.com
*.assets.techspexs.com
*.backup.techspexs.com
*.desktops.techspexs.com
*.desktops2.techspexs.com
*.erp.techspexs.com
*.ftp.techspexs.com
*.gduieportainer.techspexs.com
*.halcyon.techspexs.com
*.marketing.techspexs.com
*.notexistspawprint.techspexs.com
*.portal.techspexs.com
*.remoteapps1.techspexs.com
*.sslvpn.techspexs.com
*.sslvpn2.techspexs.com
techspexs.com
*.techspexs.com
*.www2.techspexs.com
*.me.vidio.live
*.play.vidio.live
*.six.vidio.live
vidio.live
*.vidio.live
Other domains in certificate