Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=pgaab.tv
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 06, 2026
Valid Until
May 07, 2026
85 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B1:A8:F9:2E:FB:B8:0D:D6:D7:33:42:C0:0C:1F:14:DA:FD:67:15:AA:3A:54:73:DF:F3:B3:A5:71:E9:C6:47:C2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
pinhei.com
*.pinhei.com
pgaab.tv
*.pgaab.tv
phyio.com
*.phyio.com
pierreledent.cn
*.pierreledent.cn
pinpen.co
*.pinpen.co
pioneroscancunfc.com.mx
*.pioneroscancunfc.com.mx
pivotleadershipsolutions.com
*.pivotleadershipsolutions.com
pjmzd.pro
*.pjmzd.pro
placebo.mx
*.placebo.mx
play-saber-pillar.xyz
*.play-saber-pillar.xyz
play-sonic-ward.xyz
*.play-sonic-ward.xyz
vic.bingo
*.vic.bingo
vidmag.xyz
*.vidmag.xyz
viewflipapp.com
*.viewflipapp.com
vinilotex.es
*.vinilotex.es
vitarinse.com
*.vitarinse.com
viviscalhair.com
*.viviscalhair.com
vote-for-me.com
*.vote-for-me.com
vw2g5vp.cyou
*.vw2g5vp.cyou
vw43.top
*.vw43.top
w8zjo6oz.top
*.w8zjo6oz.top
wkm14.top
*.wkm14.top
wooten.cn
*.wooten.cn
workmediatamer.co
*.workmediatamer.co
worldweb.pw
*.worldweb.pw
wuxianzy9.com
*.wuxianzy9.com
ww18677vip.shop
*.ww18677vip.shop
wys3p51.top
*.wys3p51.top
wytun.gdn
*.wytun.gdn
xezia.com
*.xezia.com
xgzum.pro
*.xgzum.pro
xmgph.cc
*.xmgph.cc
xn--4gq62f63aw0hz2hz73dluya.com
*.xn--4gq62f63aw0hz2hz73dluya.com
xn--4n0as74c.com
*.xn--4n0as74c.com
xn--5m4ak1d.com
*.xn--5m4ak1d.com
xn--9kq47ib1d24ivmm.org
*.xn--9kq47ib1d24ivmm.org
xn--9kq803ah5i4iylk2a.com
*.xn--9kq803ah5i4iylk2a.com
xn--9kqy4s8xbf7vbmb.org
*.xn--9kqy4s8xbf7vbmb.org
xn--9kqy4sc0ndz4aeyj.com
*.xn--9kqy4sc0ndz4aeyj.com
xn--ehq00h9tkfj1b.org
*.xn--ehq00h9tkfj1b.org
xn--soluesbank-r6a2o.com
*.xn--soluesbank-r6a2o.com
xptuu.net
*.xptuu.net
xsikisizle.net
*.xsikisizle.net
xweb4.com
*.xweb4.com
y66.bet
*.y66.bet
Other domains in certificate