Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=morojaya.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 25, 2026
Valid Until
August 23, 2026 59 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5E:2E:AD:9B:3E:E4:DC:E2:B3:A2:39:B7:C9:5E:8D:8B:DD:75:4E:AF:0F:B4:9E:B6:63:10:C0:53:D9:2E:CD:CD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ormas62.org *.ormas62.org

Other domains in certificate

1188dmy301.top *.1188dmy301.top
87963.sbs *.87963.sbs
*.95lw2.basketcraft.xyz *.airflow.basketcraft.xyz basketcraft.xyz *.basketcraft.xyz *.crazy.basketcraft.xyz *.dispenser.basketcraft.xyz *.duck.basketcraft.xyz *.google-classroom.basketcraft.xyz *.kenrenoodle.basketcraft.xyz *.mhdnd.basketcraft.xyz *.noodle.basketcraft.xyz *.not.basketcraft.xyz *.potatoes.basketcraft.xyz *.r.basketcraft.xyz *.simplestats.basketcraft.xyz *.yhnmath.basketcraft.xyz
*.app.fundraisingnet.it fundraisingnet.it *.fundraisingnet.it
gcvnh.sbs *.gcvnh.sbs
ghckx.sbs *.ghckx.sbs
glarnuvexo.cfd *.glarnuvexo.cfd
ivvhz.gdn *.ivvhz.gdn
luxuryvip.lol *.luxuryvip.lol
*.alshariftour.morojaya.com *.autodiscover.morojaya.com *.com.morojaya.com *.cpanel.morojaya.com *.id.morojaya.com *.jadi.morojaya.com morojaya.com *.morojaya.com *.ww25.morojaya.com
murzilovex.sbs *.murzilovex.sbs
russianfedora.pro *.russianfedora.pro
sfanatics.com *.sfanatics.com
sfrhs.sbs *.sfrhs.sbs
suster123ndx.my *.suster123ndx.my
svpgb.bid *.svpgb.bid
td17625.cc *.td17625.cc
tegpl0.cyou *.tegpl0.cyou
theadventuresofbarkley.com *.theadventuresofbarkley.com
tryreddragon.com *.tryreddragon.com
uvnhi.sbs *.uvnhi.sbs
uzolk.sbs *.uzolk.sbs
vextalorin.cfd *.vextalorin.cfd
villageplumbingandheating.com *.villageplumbingandheating.com
vnrkb.sbs *.vnrkb.sbs
vsewr.cfd *.vsewr.cfd
vsewr.sbs *.vsewr.sbs
wjphgj.sbs *.wjphgj.sbs
xalberonix.sbs *.xalberonix.sbs
xaldumiren.sbs *.xaldumiren.sbs
zonira.sbs *.zonira.sbs
zwupx.sbs *.zwupx.sbs
zyguvi.pro *.zyguvi.pro