Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=primerogrove.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 03, 2026
Valid Until
September 01, 2026 74 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AD:87:80:9D:AE:31:9A:6C:1E:0C:7E:F1:3E:97:39:46:02:14:79:AC:EF:FC:AC:46:52:D5:6A:BC:12:50:20:5E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
primerogrove.com *.primerogrove.com *.drama.primerogrove.com *.harrodsburg.primerogrove.com *.radioisotope.primerogrove.com *.sa.primerogrove.com

Other domains in certificate

73512.loan *.73512.loan *.sandbox.73512.loan
bahi.in *.bahi.in *.dskzvaem.bahi.in *.es.bahi.in *.ge.bahi.in *.han.bahi.in *.hostmaster.bahi.in *.in.bahi.in *.m.bahi.in *.mx.bahi.in *.news.bahi.in *.nhi.bahi.in *.primary.bahi.in *.ro7ak.bahi.in *.sitemaps.bahi.in *.wildcard.bahi.in *.www.bahi.in
consolidar.net *.consolidar.net *.dswllpacific.consolidar.net *.fidelity.consolidar.net *.hostmaster.consolidar.net *.vpn.consolidar.net *.ww1.consolidar.net *.ww11.consolidar.net *.ww16.consolidar.net *.ww38.consolidar.net *.zpo.consolidar.net
eikona.co *.eikona.co *.mx.eikona.co *.sitemaps.eikona.co
ethoscapitalup.com *.ethoscapitalup.com *.rustore.ethoscapitalup.com
*.cn.f-1.co.uk *.domain.f-1.co.uk *.engine.f-1.co.uk f-1.co.uk *.f-1.co.uk
*.co.krexo.com krexo.com *.krexo.com
lohitkolluri.tech *.lohitkolluri.tech *.staging.lohitkolluri.tech
*.dev.pandaexpresscareers.com *.em.pandaexpresscareers.com pandaexpresscareers.com *.pandaexpresscareers.com *.ww25.pandaexpresscareers.com
*.insights.pkmdb.com pkmdb.com *.pkmdb.com *.random.pkmdb.com *.store.pkmdb.com *.uat.pkmdb.com *.visualizations.pkmdb.com *.ww31.pkmdb.com *.www.pkmdb.com
*.cloud.probateadvisor.com *.m.probateadvisor.com probateadvisor.com *.probateadvisor.com *.rd.probateadvisor.com *.rds.probateadvisor.com *.rdweb.probateadvisor.com *.remote.probateadvisor.com *.sitemap.probateadvisor.com
quer.club *.quer.club *.random.quer.club
*.m.togethermatters.org togethermatters.org *.togethermatters.org
*.school.worldnewspal.com worldnewspal.com *.worldnewspal.com
*.leogwmaomi602tt.xxww88.com xxww88.com *.xxww88.com