Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=chicagoohareairport.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 22, 2026
Valid Until
December 21, 2026
50 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
17:12:7D:2A:69:6B:A4:D5:61:8F:9D:73:AD:7C:85:B8:40:54:26:A6:BE:C2:34:05:D3:77:C5:5D:A2:7E:B8:5E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
qgwin.vip
*.qgwin.vip
91-club-invite-code.club
*.91-club-invite-code.club
anxeity.com
*.anxeity.com
*.forum.anxeity.com
*.app.chicagoohareairport.com
chicagoohareairport.com
*.chicagoohareairport.com
*.m.chicagoohareairport.com
*.vpn.chicagoohareairport.com
holdiy.com
*.holdiy.com
infinity-tour.com
www.infinity-tour.com
infotyx.com
*.infotyx.com
joycejaggerrecommends.com
*.joycejaggerrecommends.com
lottery7-game.club
*.lottery7-game.club
loveislike.shop
*.loveislike.shop
luxhistoricpropfr.com
*.luxhistoricpropfr.com
max1oneprimenode.digital
*.max1oneprimenode.digital
mediainfluent.info
*.mediainfluent.info
melindabak.com
*.melindabak.com
mhoowhan8888.com
*.mhoowhan8888.com
mobilemonks.com
*.mobilemonks.com
networksohvasocial.info
*.networksohvasocial.info
np2mqmyswz.top
*.np2mqmyswz.top
npwd.com.cn
*.npwd.com.cn
parcelmgmt.com
*.parcelmgmt.com
peakorbitlabs.buzz
*.peakorbitlabs.buzz
pixxybet.vip
*.pixxybet.vip
pravacomp-ddv.top
*.pravacomp-ddv.top
provortexventures.digital
*.provortexventures.digital
pspgame.biz
*.pspgame.biz
qozq.com.cn
*.qozq.com.cn
qug6njynyx.top
*.qug6njynyx.top
reachlabsohvasocial.info
*.reachlabsohvasocial.info
reporttldvio.info
*.reporttldvio.info
rymfh516m1.top
*.rymfh516m1.top
safety-portal.click
www.safety-portal.click
salty.au
www.salty.au
sobhuzagroup.com
*.sobhuzagroup.com
sparkhubsohvasocial.info
*.sparkhubsohvasocial.info
storeroom.com.au
*.storeroom.com.au
swap300lotemax.biz
*.swap300lotemax.biz
tarafbet955.com
*.tarafbet955.com
tobefreetour.shop
*.tobefreetour.shop
tradeincomes.live
*.tradeincomes.live
vademolitioncontractor.com
*.vademolitioncontractor.com
wvur6wmtqg.top
*.wvur6wmtqg.top
yjbon.com
*.yjbon.com
yyq-s-ybettmu.top
*.yyq-s-ybettmu.top
Other domains in certificate