79/100 SECURITY SCORE

Certificate Information

Subject
CN=dreamscancometrue.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 12, 2026
Valid Until
May 13, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
57:59:33:85:96:4E:67:76:A1:3E:F1:26:4F:4B:B3:FC:BC:F4:89:EB:50:B2:FC:BC:CA:E1:8C:33:5A:67:F8:06
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ecya.org *.ecya.org

Other domains in certificate

dreamscancometrue.org *.dreamscancometrue.org
eatema.com *.eatema.com
entryfee.it *.entryfee.it
fastlanesub.com *.fastlanesub.com
fundinsight.org *.fundinsight.org
gdrongdacj.com *.gdrongdacj.com
ghanalens.com *.ghanalens.com
gmadatasecuritysettlment.com *.gmadatasecuritysettlment.com
goldenaplomb.com *.goldenaplomb.com
goldengrace.org *.goldengrace.org
goodaiagents.com *.goodaiagents.com
greenmatch.org *.greenmatch.org
oaya.org *.oaya.org
odyssey-inn.homes *.odyssey-inn.homes
organicpet.com *.organicpet.com
orvalhodanatureza.cyou *.orvalhodanatureza.cyou
ourpeace.org *.ourpeace.org
paquetes.it *.paquetes.it
playunlimitedfree.com *.playunlimitedfree.com
ratinaclear.com *.ratinaclear.com
refugefromthestorm.org *.refugefromthestorm.org
rescomm.ca *.rescomm.ca
rescomrepair.ca *.rescomrepair.ca
rightingamerica.org *.rightingamerica.org
rotnew.com *.rotnew.com
rs67703.cc *.rs67703.cc
rs83766.cc *.rs83766.cc
rtpberkah-hints2.sbs *.rtpberkah-hints2.sbs
ruibarbo.org *.ruibarbo.org
sandcredit.com *.sandcredit.com
sbcommerciale.com *.sbcommerciale.com
security-job-for-mexicans-pango.click *.security-job-for-mexicans-pango.click
sexyconsents.com *.sexyconsents.com
sinoglobal.co *.sinoglobal.co
skpadel.com *.skpadel.com
skyportusa.net *.skyportusa.net
slicksurge.com *.slicksurge.com
slimdownpills.com *.slimdownpills.com
somuchhate.org *.somuchhate.org
surrogacy-costs-735434875.click *.surrogacy-costs-735434875.click
sweetearrings.com *.sweetearrings.com
sweetpajamas.com *.sweetpajamas.com
sweetpurses.com *.sweetpurses.com
techwebgenius.com *.techwebgenius.com