76/100 SECURITY SCORE

Certificate Information

Subject
CN=panya.live
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 26, 2026
Valid Until
July 25, 2026 76 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:91:ED:E9:CF:D1:04:EE:3C:4C:FB:52:18:51:FA:3E:C3:3F:D4:A1:43:DD:18:E4:B2:23:E4:0E:D6:2E:76:E3
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
sentienceconsole.com *.sentienceconsole.com *.53aa75cd-236d-4a32-b60d-16426e355583.sentienceconsole.com *.8f38b8cf-0547-448f-9758-3ad8cd75c101.sentienceconsole.com *.admin.sentienceconsole.com *.app.sentienceconsole.com *.backup.sentienceconsole.com *.blog.sentienceconsole.com *.cloud.sentienceconsole.com *.dashboard.sentienceconsole.com *.mail.sentienceconsole.com *.mailer.sentienceconsole.com *.marketing.sentienceconsole.com *.members.sentienceconsole.com *.new.sentienceconsole.com *.qa.sentienceconsole.com *.rd.sentienceconsole.com *.rds.sentienceconsole.com *.rdweb.sentienceconsole.com *.remote.sentienceconsole.com *.secure.sentienceconsole.com *.staging.sentienceconsole.com *.stg.sentienceconsole.com *.tjmxwbackup.sentienceconsole.com *.uat.sentienceconsole.com *.v2.sentienceconsole.com *.web.sentienceconsole.com *.webmail.sentienceconsole.com *.www.sentienceconsole.com

Other domains in certificate

9xmovies.io *.9xmovies.io *.ww25.9xmovies.io
*.ads.amonzom.com *.ai.amonzom.com amonzom.com *.amonzom.com *.flow.amonzom.com *.hotfix.amonzom.com *.insight.amonzom.com *.prod.amonzom.com *.samara.amonzom.com *.secure.amonzom.com *.superset.amonzom.com
angelnailsnewport.com *.angelnailsnewport.com *.cpcalendars.angelnailsnewport.com *.webmail.angelnailsnewport.com
dangdut4dwd.store *.dangdut4dwd.store *.www.dangdut4dwd.store
emotorcycleloan.com *.emotorcycleloan.com *.www.emotorcycleloan.com
*.go.laprepsoccer.net laprepsoccer.net *.laprepsoccer.net *.m.laprepsoccer.net
mashustic.space *.mashustic.space *.ww25.mashustic.space
moive.cc *.moive.cc *.www.moive.cc
*.6.mybpthinktank.com *.articles.mybpthinktank.com mybpthinktank.com *.mybpthinktank.com *.social.mybpthinktank.com *.www.mybpthinktank.com
panya.live *.panya.live *.ww38.panya.live
*.data.pinkcamforum.cc *.desktop.pinkcamforum.cc *.hostmaster.pinkcamforum.cc *.hotfix.pinkcamforum.cc pinkcamforum.cc *.pinkcamforum.cc *.preview.pinkcamforum.cc *.sandbox.pinkcamforum.cc *.staging.pinkcamforum.cc *.ww16.pinkcamforum.cc *.ww25.pinkcamforum.cc
ratewap.com *.ratewap.com *.shop.ratewap.com *.store.ratewap.com
*.play.wwwdallascad.org wwwdallascad.org *.wwwdallascad.org