Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=cinder.life
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 19, 2025
Valid Until
March 19, 2026 30 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:3E:7E:45:88:F6:23:85:A1:79:ED:5E:D0:47:F1:68:16:CC:8D:3B:F9:E6:48:19:20:1D:C8:25:81:2F:E4:AE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
prokerela.com *.prokerela.com *.greetings.prokerela.com *.staging.prokerela.com *.ww01.prokerela.com

Other domains in certificate

*.backup.basketall.com basketall.com *.basketall.com *.flashscore.basketall.com *.random.basketall.com *.secure.basketall.com *.wordpress.basketall.com
*.0498c2ce-b21a-4212-9ac4-d28601a42b49.bodo.bet *.6fxwgpnuam.bodo.bet *.6tjqiyjh1k.bodo.bet *.backup.bodo.bet bodo.bet *.bodo.bet *.dashboard.bodo.bet *.dvo48vobfc.bodo.bet *.mail.bodo.bet *.mailer.bodo.bet *.marketing.bodo.bet *.members.bodo.bet *.qa.bodo.bet *.staging.bodo.bet *.stg.bodo.bet *.test.bodo.bet *.uat.bodo.bet *.v1.bodo.bet *.v2.bodo.bet *.web.bodo.bet *.wtfvr1tlrc.bodo.bet *.wtfvrtlrc.bodo.bet
cfih.com.au *.cfih.com.au
ciliba.me *.ciliba.me *.ww25.ciliba.me
cinder.life *.cinder.life
datafluxa.com *.datafluxa.com
ginpla.net *.ginpla.net
handsonhealth.com.au *.handsonhealth.com.au
*.hostmaster.lafoka.shop lafoka.shop *.lafoka.shop *.mail.lafoka.shop *.www.lafoka.shop
livingeasierwithdisability.com.au *.livingeasierwithdisability.com.au
loadedlifting.com.au *.loadedlifting.com.au
nudva.art *.nudva.art
offeriqo.com *.offeriqo.com
*.cpanel.pokerrepublik.site *.cpcalendars.pokerrepublik.site *.cpcontacts.pokerrepublik.site *.mail.pokerrepublik.site pokerrepublik.site *.pokerrepublik.site *.random.pokerrepublik.site *.webdisk.pokerrepublik.site *.webmail.pokerrepublik.site *.ww1.pokerrepublik.site
questvue.com *.questvue.com
*.golf.rymos.com *.invest.rymos.com rymos.com *.rymos.com
sugarparty.com.au *.sugarparty.com.au
thoriumlftr.com *.thoriumlftr.com
thoriumone.com *.thoriumone.com
thoriumvolt.com *.thoriumvolt.com
triuyebasi.com *.triuyebasi.com
turnthepage.com *.turnthepage.com *.wtg-site.turnthepage.com