SSL Certificate Analysis for random.epurchases.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=orangecountycfp.com

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

February 17, 2026

Valid Until

May 18, 2026 85 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

9B:39:3B:B3:85:2F:F2:64:6F:D2:3E:2B:46:9B:34:09:AB:76:A6:2A:5B:E9:1E:4F:F2:07:EA:3C:25:8B:C3:11

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

epurchases.com *.epurchases.com *.m.epurchases.com *.random.epurchases.com *.rungjww1.epurchases.com *.sitemap.epurchases.com *.store.epurchases.com *.wiki.epurchases.com *.wp.epurchases.com *.ww1.epurchases.com *.ww25.epurchases.com

Other domains in certificate

expepia.com *.expepia.com *.ww25.expepia.com *.ww38.expepia.com

*.app.fusiongamerhub.com fusiongamerhub.com *.fusiongamerhub.com *.sitemap.fusiongamerhub.com *.test.fusiongamerhub.com *.transactions.fusiongamerhub.com

*.dubstore.kudosrecords.co kudosrecords.co *.kudosrecords.co

orangecountycfp.com *.orangecountycfp.com *.random.orangecountycfp.com

phantomrepublic.com *.phantomrepublic.com *.www.phantomrepublic.com

*.dashboard.renske.it renske.it *.renske.it *.report.renske.it *.webmail.renske.it

*.316442cf-bc05-4ff6-af95-d78f323e928f.rtpmevius88.xyz rtpmevius88.xyz *.rtpmevius88.xyz *.ww25.rtpmevius88.xyz

*.aaaa.showbreast.com *.ar.showbreast.com *.bbbb.showbreast.com *.cccc.showbreast.com *.cs.showbreast.com *.cz.showbreast.com *.de.showbreast.com *.el.showbreast.com *.es.showbreast.com *.fr.showbreast.com *.go.showbreast.com *.gr.showbreast.com *.hu.showbreast.com *.it.showbreast.com *.ja.showbreast.com *.jp.showbreast.com *.ko.showbreast.com *.nb.showbreast.com *.nl.showbreast.com *.no.showbreast.com *.pl.showbreast.com *.pt.showbreast.com *.ro.showbreast.com *.ru.showbreast.com showbreast.com *.showbreast.com *.sv.showbreast.com *.sw.showbreast.com *.tr.showbreast.com *.vr.showbreast.com *.zh.showbreast.com