Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=flightstats.au
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 23, 2026
Valid Until
September 21, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
89:56:4A:88:84:7C:9D:1C:08:D2:D4:7B:EE:94:AB:10:7F:A6:11:75:95:D5:DA:BF:53:D0:CA:34:04:D5:B5:02
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pandaocr.pro *.pandaocr.pro *.admin.pandaocr.pro

Other domains in certificate

bestooning.com *.bestooning.com *.gb5nlc.bestooning.com
flightstats.au *.flightstats.au *.mailserver.flightstats.au
*.admin.frostbranch.com *.birbank.frostbranch.com *.cian.frostbranch.com frostbranch.com *.frostbranch.com *.goldapple.frostbranch.com *.kazpost.frostbranch.com *.lgumvw.frostbranch.com *.pop.frostbranch.com
guasta.com *.guasta.com *.telecom.guasta.com
*.aburapanel.logisticswizard.io *.api.logisticswizard.io *.app.logisticswizard.io *.apps.logisticswizard.io *.dd30eeaf-c222-46f4-8886-cab985c8a4a6.logisticswizard.io logisticswizard.io *.logisticswizard.io *.test.logisticswizard.io *.xqwdjekktkpanel.logisticswizard.io
*.dev.londonlogodesign.com londonlogodesign.com *.londonlogodesign.com
*.0.mgy.cm *.89.mgy.cm mgy.cm *.mgy.cm
*.demo.nailnippers.com *.jgjc.nailnippers.com *.mobile.nailnippers.com nailnippers.com *.nailnippers.com *.pwwabfbmyx.nailnippers.com *.recruit.nailnippers.com *.shop.nailnippers.com *.store.nailnippers.com *.test.nailnippers.com *.wildcard.nailnippers.com *.ww12.nailnippers.com *.www.nailnippers.com *.zytze.nailnippers.com
*.9h51dc.obriri.com *.a736a003-4e8b-4483-b0e9-d5ae40ccc3c9.obriri.com *.aaf9f551-4a93-4a08-a549-f3a2907dca5a.obriri.com *.api.obriri.com *.awzbhdev.obriri.com *.backup.obriri.com *.dashboard.obriri.com *.dev.obriri.com *.gitlab.obriri.com *.jizdgzseopliq.obriri.com *.mail.obriri.com *.mailer.obriri.com *.marketing.obriri.com *.nieuasvrnndev.obriri.com obriri.com *.obriri.com *.qa.obriri.com *.remote.obriri.com *.secure.obriri.com *.staging.obriri.com *.stg.obriri.com *.v2.obriri.com *.vpn.obriri.com *.zseopliq.obriri.com
*.home.plusstardigital.com plusstardigital.com *.plusstardigital.com *.rtslapro.plusstardigital.com *.trustfundsavings.plusstardigital.com
*.c.pubg-wallpaper.com *.desktop.pubg-wallpaper.com *.m.pubg-wallpaper.com pubg-wallpaper.com *.pubg-wallpaper.com *.ringtones.pubg-wallpaper.com *.us.pubg-wallpaper.com
usclienttreecasino.com *.usclienttreecasino.com *.ww16.usclienttreecasino.com