75/100 SECURITY SCORE

Certificate Information

Subject
CN=dstill.co
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 09, 2026
Valid Until
January 07, 2027 63 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A9:27:B7:04:A2:65:DF:1D:BB:B3:66:E8:12:6F:4E:BB:E2:53:23:D1:1F:82:D2:8B:B6:23:6E:B7:59:91:57:F0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
technasolutions.com *.technasolutions.com *.crm.technasolutions.com *.etap.technasolutions.com *.package.technasolutions.com *.qr.technasolutions.com

Other domains in certificate

*.638e364b-6b2c-4974-910e-7dffdb04f183.corrigo.co corrigo.co *.corrigo.co
*.6441056b613c32a9.dstill.co dstill.co *.dstill.co *.gpt.dstill.co *.lyncdiscover.dstill.co *.prod.dstill.co
legalplane.com *.legalplane.com *.random.legalplane.com
*.lesprivat.myedu.id myedu.id *.myedu.id
pimark.co.uk *.pimark.co.uk *.ww38.pimark.co.uk
td71003.cc *.td71003.cc
teami.uk *.teami.uk
technetix.uk *.technetix.uk
tenkara.uk *.tenkara.uk
thehun.uk *.thehun.uk
*.areyouready.theworksagency.com.au *.letmein.theworksagency.com.au *.mail.theworksagency.com.au theworksagency.com.au *.theworksagency.com.au
toboggans.uk *.toboggans.uk
tonycanada.ca *.tonycanada.ca
trilite.uk *.trilite.uk
truescalecapitalconnect.info *.truescalecapitalconnect.info
truescalerealmx.info *.truescalerealmx.info
trumeter.uk *.trumeter.uk
trytksoftwareinc.com *.trytksoftwareinc.com
turbofuturemesh.click *.turbofuturemesh.click
ubras.uk *.ubras.uk
uwalls.uk *.uwalls.uk
ventomest.cfd *.ventomest.cfd
vertex360mesh.digital *.vertex360mesh.digital
virat.biz *.virat.biz
virtupot.click *.virtupot.click
viryus.info *.viryus.info
wealthymade.com *.wealthymade.com
weholite.uk *.weholite.uk
wellfit.uk *.wellfit.uk
westco.uk *.westco.uk
wheelpower.uk *.wheelpower.uk
whoelse.in *.whoelse.in
wwsires.uk *.wwsires.uk
x1wattydc3.top *.x1wattydc3.top
xdv2ichai9.top *.xdv2ichai9.top