78/100 SECURITY SCORE

Certificate Information

Subject
CN=banasthali.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 14, 2026
Valid Until
January 12, 2027 73 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
36:C5:BB:92:3B:AB:22:F6:3D:75:32:85:57:47:1A:40:ED:BA:D5:89:3F:E0:EF:71:5E:B7:39:A3:2B:DB:F9:4B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
banasthali.com *.banasthali.com *.client.banasthali.com *.mobile.banasthali.com *.org.banasthali.com *.remote.banasthali.com *.remoto.banasthali.com *.vpn.banasthali.com *.vpn1.banasthali.com *.webconnect.banasthali.com *.wildcard.banasthali.com *.ww12.banasthali.com

Other domains in certificate

8x8.live *.8x8.live *.cceng.8x8.live *.fwd.8x8.live *.ww38.8x8.live
ace365.bet *.ace365.bet *.csobi62586621.ace365.bet *.lugmpgboig.ace365.bet
automytion.info *.automytion.info *.dev.automytion.info
*.analytics.catsbanned.co.uk catsbanned.co.uk *.catsbanned.co.uk *.production.catsbanned.co.uk *.redash.catsbanned.co.uk
*.admin.offshore.market offshore.market *.offshore.market
*.1www.peefectgirls.net *.admin.peefectgirls.net *.api.peefectgirls.net *.app.peefectgirls.net *.bi.peefectgirls.net *.dash.peefectgirls.net *.demo.peefectgirls.net *.dev.peefectgirls.net *.fr.peefectgirls.net *.internal.peefectgirls.net *.ipad.peefectgirls.net *.m.peefectgirls.net *.notexistsm.peefectgirls.net peefectgirls.net *.peefectgirls.net *.random.peefectgirls.net *.redash.peefectgirls.net *.remote.peefectgirls.net *.reporting.peefectgirls.net *.superset.peefectgirls.net *.vpn.peefectgirls.net *.wwr.peefectgirls.net *.www.peefectgirls.net *.wwww.peefectgirls.net
*.mx.quitequirky.co.uk quitequirky.co.uk *.quitequirky.co.uk
*.dashboard.residentapp.com *.for.residentapp.com *.iotas.residentapp.com *.mobile.residentapp.com residentapp.com *.residentapp.com *.www.residentapp.com
*.assets.techspexs.com *.backup.techspexs.com *.desktops.techspexs.com *.desktops2.techspexs.com *.erp.techspexs.com *.ftp.techspexs.com *.gduieportainer.techspexs.com *.halcyon.techspexs.com *.marketing.techspexs.com *.notexistspawprint.techspexs.com *.portal.techspexs.com *.remoteapps1.techspexs.com *.sslvpn.techspexs.com *.sslvpn2.techspexs.com techspexs.com *.techspexs.com *.www2.techspexs.com
*.me.vidio.live *.play.vidio.live *.six.vidio.live vidio.live *.vidio.live