Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=mediaindustry.com.au
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 27, 2026
Valid Until
July 26, 2026 60 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:84:70:5F:B7:D4:C5:65:9D:13:9C:9A:E5:FC:50:B8:0C:8A:8E:1D:F9:02:58:E0:7E:0C:8D:ED:21:08:B3:FF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
oyp.net *.oyp.net *.jgcamdq.oyp.net

Other domains in certificate

189.locker *.189.locker *.575bb44f-1a46-4054-8151-61f19f470f43.189.locker *.6804af2b-12ee-4e80-8457-f60d96f83409.189.locker *.966b8215-3763-4a6d-887b-8e7e967908fe.189.locker *.a1eaf6b3-cc31-4b24-9b77-8c2da552ea91.189.locker *.admin.189.locker *.api.189.locker *.app.189.locker *.arquivos.189.locker *.assets.189.locker *.b3a8666d-d2a9-43e5-8c13-d39a51b3104c.189.locker *.backup.189.locker *.blog.189.locker *.dashboard.189.locker *.demo.189.locker *.dev.189.locker *.docs.189.locker *.external.189.locker *.forms.189.locker *.hr.189.locker *.intranet.189.locker *.mail.189.locker *.mailer.189.locker *.marketing.189.locker *.my.189.locker *.new.189.locker *.portal.189.locker *.public.189.locker *.secure.189.locker *.share.189.locker *.sharepoint.189.locker *.smepwuhg.189.locker *.sslvpn.189.locker *.stg.189.locker *.test.189.locker *.uat.189.locker *.v1.189.locker *.v2.189.locker
577u.art *.577u.art *.762935d5-a94f-40f0-99c2-91709714c496.577u.art *.docs.577u.art *.external.577u.art *.my.577u.art *.share.577u.art *.www.577u.art
9101.live *.9101.live *.blog.9101.live *.comune.9101.live *.laravel.9101.live
*.admin.finvoss.com *.api.finvoss.com *.app.finvoss.com *.bocmmtest.finvoss.com finvoss.com *.finvoss.com *.remote.finvoss.com *.staging.finvoss.com *.test.finvoss.com *.www.finvoss.com
*.admin.inle.it *.analytics.inle.it *.api.inle.it *.backend.inle.it *.demo.inle.it *.dev.inle.it inle.it *.inle.it *.remote.inle.it *.stats.inle.it *.visualize.inle.it *.wp.inle.it *.www.inle.it
maadurgachalisa.com *.maadurgachalisa.com *.ww25.maadurgachalisa.com
mediaindustry.com.au *.mediaindustry.com.au
napafkan.com *.napafkan.com *.ww16.napafkan.com *.ww25.napafkan.com
*.staging.win79u.club win79u.club *.win79u.club