76/100 SECURITY SCORE

Certificate Information

Subject
CN=breathworkclass.com.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 19, 2026
Valid Until
August 17, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:14:91:F1:D2:84:DB:E7:59:80:45:6A:A7:41:C8:3D:35:1E:BC:2B:C1:4B:59:A4:D3:6E:A4:B7:77:C7:3F:51
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
stikeout.im *.stikeout.im *.random.stikeout.im *.ww25.stikeout.im

Other domains in certificate

*.0.369981.xyz 369981.xyz *.369981.xyz *.7.369981.xyz
388695.xyz *.388695.xyz *.7.388695.xyz
44thbombgroup.com *.44thbombgroup.com *.random.44thbombgroup.com
*.3.578541.xyz *.5.578541.xyz 578541.xyz *.578541.xyz *.7.578541.xyz
*.adminer.annesuniqueboutique.com annesuniqueboutique.com *.annesuniqueboutique.com *.bgptools-wildcard-confirmed.annesuniqueboutique.com *.email.annesuniqueboutique.com *.imap.annesuniqueboutique.com *.mail.annesuniqueboutique.com *.random.annesuniqueboutique.com *.smtp.annesuniqueboutique.com *.wallet.annesuniqueboutique.com *.webmail.annesuniqueboutique.com *.ww12.annesuniqueboutique.com *.ww7.annesuniqueboutique.com *.ww99.annesuniqueboutique.com
breathworkclass.com.au *.breathworkclass.com.au
ciejudi89.site *.ciejudi89.site *.www.ciejudi89.site
collegeofthecityofnewyork.com *.collegeofthecityofnewyork.com *.ww25.collegeofthecityofnewyork.com
eho.au *.eho.au *.ww25.eho.au
*.a.melbournearchitects.com *.api.melbournearchitects.com *.app.melbournearchitects.com *.backend.melbournearchitects.com melbournearchitects.com *.melbournearchitects.com *.monitoring.melbournearchitects.com *.preview-superset.melbournearchitects.com *.wp.melbournearchitects.com
*.free.movie4khd.com *.mail.movie4khd.com movie4khd.com *.movie4khd.com *.ww12.movie4khd.com
pickandchoose.it *.pickandchoose.it
pietrantonio.it *.pietrantonio.it
pitt.it *.pitt.it
qrpay.co *.qrpay.co
*.analytic.vamps.it *.api.vamps.it *.backend.vamps.it vamps.it *.vamps.it
*.a.wretchedrecords.com *.app.wretchedrecords.com *.ftp.wretchedrecords.com *.green-wolf.wretchedrecords.com *.imap.wretchedrecords.com *.m.wretchedrecords.com *.nigelcunliffe.wretchedrecords.com *.owlicia.wretchedrecords.com *.piraeusaudio.wretchedrecords.com *.sitemap.wretchedrecords.com *.smtp.wretchedrecords.com *.stormwolfmedia.wretchedrecords.com *.webmail.wretchedrecords.com wretchedrecords.com *.wretchedrecords.com
*.random.youhurtmyfeelingsmovie.com *.ww16.youhurtmyfeelingsmovie.com youhurtmyfeelingsmovie.com *.youhurtmyfeelingsmovie.com