Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=timberwholesale.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 09, 2026
Valid Until
January 07, 2027
66 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C4:20:9F:5C:E0:D8:CD:EA:E1:58:D0:58:94:C2:8F:F4:10:76:C5:B6:E5:E5:E2:14:5A:67:99:9A:C4:A4:36:8F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
ramotgitewc.com
*.ramotgitewc.com
*.account.ramotgitewc.com
a2zprint.xyz
*.a2zprint.xyz
*.argo.a2zprint.xyz
*.e37ff09e1020.a2zprint.xyz
*.printportol.a2zprint.xyz
*.random.a2zprint.xyz
dda.com.pl
*.dda.com.pl
*.demo.dda.com.pl
*.dev.dda.com.pl
*.hostmaster.dda.com.pl
*.mta-sts.dda.com.pl
*.old.dda.com.pl
*.shop.dda.com.pl
*.store.dda.com.pl
*.test.dda.com.pl
*.www.dda.com.pl
dtcz26rk-qjuli6.top
*.dtcz26rk-qjuli6.top
*.hub.dtcz26rk-qjuli6.top
*.docs.gmp-club.com
gmp-club.com
*.gmp-club.com
*.status.gmp-club.com
*.support.gmp-club.com
*.dashboard.lordfilm-smotret.biz
*.dev.lordfilm-smotret.biz
*.hd2.lordfilm-smotret.biz
*.hd3.lordfilm-smotret.biz
*.hd4.lordfilm-smotret.biz
lordfilm-smotret.biz
*.lordfilm-smotret.biz
*.staging.lordfilm-smotret.biz
*.autodiscover.lucky-bums.xyz
*.cpanel.lucky-bums.xyz
*.laravel.lucky-bums.xyz
lucky-bums.xyz
*.lucky-bums.xyz
*.www.lucky-bums.xyz
*.adm.nameui.com
nameui.com
*.nameui.com
*.admin.oporntv.net
*.ci.oporntv.net
*.dashs.oporntv.net
oporntv.net
*.oporntv.net
*.staging.oporntv.net
auth.prattplaceinn.com
blog.prattplaceinn.com
checkout.prattplaceinn.com
ftp.prattplaceinn.com
jupyter.prattplaceinn.com
mail.prattplaceinn.com
mailhost.prattplaceinn.com
marketplace.prattplaceinn.com
mta-sts.prattplaceinn.com
prattplaceinn.com
s3.prattplaceinn.com
shop.prattplaceinn.com
sitemaps.prattplaceinn.com
sslvpn.prattplaceinn.com
store.prattplaceinn.com
uesu1s2ud960lh04.prattplaceinn.com
vpn.prattplaceinn.com
wordpress.prattplaceinn.com
www.prattplaceinn.com
*.dashboard.ritual.com.au
*.mail3.ritual.com.au
*.mail4.ritual.com.au
ritual.com.au
*.ritual.com.au
*.root.ritual.com.au
*.so.ritual.com.au
*.app.stevo.com
stevo.com
*.stevo.com
*.www.stevo.com
tarnyx.bond
*.tarnyx.bond
*.mailhost.timberwholesale.com.au
*.mailsrv.timberwholesale.com.au
*.mx7.timberwholesale.com.au
*.sniper.timberwholesale.com.au
timberwholesale.com.au
*.timberwholesale.com.au
*.ww25.timberwholesale.com.au
Other domains in certificate