Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sweetfoodmoments.food
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 17, 2026
Valid Until
May 18, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
13:AB:54:FD:6B:D0:24:52:C9:DD:45:DA:98:F8:95:93:74:1D:30:59:42:EF:DF:A5:97:A5:B0:8C:51:53:0B:06
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
pelipedia.com *.pelipedia.com *.ww17.pelipedia.com

Other domains in certificate

123b55.net *.123b55.net *.m.123b55.net
*.ad.bankofbankofamerica.com bankofbankofamerica.com *.bankofbankofamerica.com *.ww1.bankofbankofamerica.com *.ww17.bankofbankofamerica.com *.ww25.bankofbankofamerica.com
carlinkitlife.com *.carlinkitlife.com *.ww38.carlinkitlife.com
chatgptme.com *.chatgptme.com *.old1.chatgptme.com *.remote.chatgptme.com *.report.chatgptme.com
coursi.io *.coursi.io *.tracking.coursi.io *.ww25.coursi.io *.ww38.coursi.io
dartmusicinternational.org *.dartmusicinternational.org
*.afiliados.ilha.bet ilha.bet *.ilha.bet
*.ejb.intesi.it intesi.it *.intesi.it
*.at.lonchamp.com *.cdn.lonchamp.com lonchamp.com *.lonchamp.com *.ns.lonchamp.com
*.es.natal.studio natal.studio *.natal.studio
*.api.paten69best.com *.mysql.paten69best.com paten69best.com *.paten69best.com *.shop.paten69best.com
*.api.superjagat88.shop *.sitemaps.superjagat88.shop superjagat88.shop *.superjagat88.shop
*.app.sweetfoodmoments.food *.intranet.sweetfoodmoments.food *.shop.sweetfoodmoments.food sweetfoodmoments.food *.sweetfoodmoments.food
*.9361e272-19e0-4e64-82f0-3b847d6fd998.tamurhaq.com *.api.tamurhaq.com *.app.tamurhaq.com *.assets.tamurhaq.com *.cloud.tamurhaq.com *.git.tamurhaq.com *.hostmaster.tamurhaq.com *.inmdhgxjyiassets.tamurhaq.com *.rd.tamurhaq.com *.rds.tamurhaq.com *.rdweb.tamurhaq.com *.remote.tamurhaq.com tamurhaq.com *.tamurhaq.com *.vpn.tamurhaq.com *.webmail.tamurhaq.com *.www.tamurhaq.com
threasdszone.com *.threasdszone.com
westsidedentalcare.com.au *.westsidedentalcare.com.au *.ww38.westsidedentalcare.com.au *.www.westsidedentalcare.com.au
what-the-fake.com *.what-the-fake.com
*.acceptance.wwwtocite.net *.ftp.wwwtocite.net *.kafka-ui.wwwtocite.net *.localhost.wwwtocite.net *.pbeinacceptance.wwwtocite.net *.sitemaps.wwwtocite.net *.whm.wwwtocite.net wwwtocite.net *.wwwtocite.net