Cached · just now
94/100 SECURITY SCORE

Certificate Information

Subject
CN=prawny.co.uk
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
March 10, 2026
Valid Until
June 08, 2026 39 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D7:CB:20:FE:33:D7:24:0C:E6:EF:A9:ED:3D:FA:98:18:32:64:34:90:D3:32:C4:00:46:A1:8A:27:51:D1:A5:E4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; script-src; script-src-attr; +8 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
accelerometer=(), browsing-topics=(), camera=(); +15 more
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
prawny.co.uk *.prawny.co.uk *.autodiscover.prawny.co.uk *.radca.prawny.co.uk

Other domains in certificate

*.1vee9.babbeel.com *.420clwei.babbeel.com babbeel.com *.babbeel.com *.hostmaster.babbeel.com *.vee.babbeel.com *.wg9u4.babbeel.com *.ww25.babbeel.com
*.backup.bookpublisher.com.au *.beta.bookpublisher.com.au *.blog.bookpublisher.com.au bookpublisher.com.au *.bookpublisher.com.au *.crm.bookpublisher.com.au *.demo.bookpublisher.com.au *.emv1.bookpublisher.com.au *.f7fc3ee8-aebb-40d8-b3d3-8ee545e20a32.bookpublisher.com.au *.forum.bookpublisher.com.au *.forums.bookpublisher.com.au *.help.bookpublisher.com.au *.m.bookpublisher.com.au *.mail.bookpublisher.com.au *.new.bookpublisher.com.au *.old.bookpublisher.com.au *.s.bookpublisher.com.au *.s1.bookpublisher.com.au *.service.bookpublisher.com.au *.shop.bookpublisher.com.au *.store.bookpublisher.com.au *.temp.bookpublisher.com.au *.test.bookpublisher.com.au *.www.bookpublisher.com.au
bootehandel.de *.bootehandel.de
*.acer.edr.au *.acu.edr.au *.angliss.edr.au *.aspire.edr.au edr.au *.edr.au *.esa.edr.au *.kbs.edr.au *.murdoch.edr.au *.openaccess.edr.au *.random.edr.au *.sa.edr.au
gbpg2020-movie.com *.gbpg2020-movie.com
judi.au *.judi.au *.na.judi.au
maxum.studio *.maxum.studio *.www.maxum.studio
*.home.miniplay.org miniplay.org *.miniplay.org *.web.miniplay.org
rolew.online *.rolew.online
*.random.salmocampground.com salmocampground.com *.salmocampground.com
*.apple.thehobbycenter.com thehobbycenter.com *.thehobbycenter.com *.ww38.thehobbycenter.com
*.analytic2.turf.net *.collet.turf.net *.data.turf.net *.global.turf.net *.mx.turf.net *.superset.turf.net turf.net *.turf.net *.ww16.turf.net
*.dev-ci.whitecallingcard.com *.hermes.whitecallingcard.com *.topup.whitecallingcard.com whitecallingcard.com *.whitecallingcard.com *.ww38.whitecallingcard.com
*.mail2.wilhelm-stoecken.de wilhelm-stoecken.de *.wilhelm-stoecken.de *.ww16.wilhelm-stoecken.de