Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=nani.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 20, 2026
Valid Until
August 18, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B4:B7:34:B3:69:50:3A:0A:43:A7:3C:73:B6:DE:6E:E4:42:60:35:DC:02:C7:FD:5D:9B:63:F4:40:91:0D:3C:11
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
tool.ag *.tool.ag *.dashboard.tool.ag *.posta.tool.ag *.time.tool.ag *.wap.tool.ag

Other domains in certificate

a360rpt.top *.a360rpt.top *.btgtg.a360rpt.top *.dev.a360rpt.top *.psghpwsrvk.a360rpt.top
donair.co *.donair.co *.m.donair.co
*.5qj59p.f1token.one *.6fdd844a-21eb-4e91-b47d-3f64bf9b47e8.f1token.one *.api.f1token.one *.app.f1token.one *.dev.f1token.one f1token.one *.f1token.one *.www.f1token.one
gobulgaria.co *.gobulgaria.co *.it.gobulgaria.co *.ro.gobulgaria.co *.sv.gobulgaria.co
jsh40.com *.jsh40.com *.m.jsh40.com
*.anaitwa.nani.au *.anipe.nani.au *.ankudumia.nani.au *.jina.nani.au *.kafiwa.nani.au *.karucha.nani.au *.kwa.nani.au *.linatoka.nani.au *.mama.nani.au *.mgeni.nani.au *.mkusudia.nani.au *.mungu.nani.au *.na.nani.au *.nampatia.nani.au nani.au *.nani.au *.nani.nani.au *.ni.nani.au *.nimpe.nani.au *.niwa.nani.au *.raja.nani.au *.random.nani.au *.semawwe.nani.au *.una.nani.au *.unaitwa.nani.au *.unamuogopa.nani.au *.unapigia.nani.au *.wako.nani.au *.wangu.nani.au *.we.nani.au *.wewe.nani.au *.ww.nani.au *.ya.nani.au *.yangu.nani.au *.yo.nani.au
*.api.sumocrate.com *.hostmaster.sumocrate.com *.m.sumocrate.com sumocrate.com *.sumocrate.com
*.m.thebrooksdc.com thebrooksdc.com *.thebrooksdc.com *.www.thebrooksdc.com
*.0edvmr1ktw.yenigiris.bet *.0j9gonoxa2.yenigiris.bet *.a.yenigiris.bet *.b.yenigiris.bet *.ec3beif4io.yenigiris.bet *.i4omv5ujuj.yenigiris.bet *.kyz3slsf3z.yenigiris.bet *.m.yenigiris.bet *.p1u0p06yqh.yenigiris.bet *.qum5cmybiu.yenigiris.bet *.sfa5akohjv.yenigiris.bet *.sitemaps.yenigiris.bet *.webmail.yenigiris.bet yenigiris.bet *.yenigiris.bet *.zj8w4rlqdr.yenigiris.bet