76/100 SECURITY SCORE

Certificate Information

Subject
CN=imagining.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 16, 2026
Valid Until
July 15, 2026 70 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:E4:C8:B8:D0:F5:69:59:8A:5E:BE:18:64:42:18:32:92:5E:41:41:98:06:29:97:B2:F6:0B:3E:DF:E5:46:66
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
imagining.com *.imagining.com *.193d2b31-096c-4c24-a23b-6524705aa128.imagining.com *.8b50a83f-9762-4ccb-9d58-ac204db363e3.imagining.com *.absoluteroofandhome.imagining.com *.abtassociatesinc.imagining.com *.access.imagining.com *.achieved.imagining.com *.alliance.imagining.com *.anonymityo.imagining.com *.apcu.imagining.com *.app.imagining.com *.apps.imagining.com *.ckkjltwmcwwebshop.imagining.com *.cloud.imagining.com *.dex.imagining.com *.dyvmkultrasound.imagining.com *.gateway.imagining.com *.health.imagining.com *.hunter.imagining.com *.ids.imagining.com *.imagining-clinical.imagining.com *.inovision.imagining.com *.iogin.imagining.com *.jkliqparagon.imagining.com *.la.imagining.com *.lamb.imagining.com *.mail.imagining.com *.mat.imagining.com *.math.imagining.com *.ms.imagining.com *.paragon.imagining.com *.pay.imagining.com *.presence.imagining.com *.qa-cicd.imagining.com *.qqqoealliance.imagining.com *.rdp.imagining.com *.rds.imagining.com *.rds1.imagining.com *.rdzrupty.imagining.com *.remote.imagining.com *.ruziosslvpn3.imagining.com *.shared.imagining.com *.shop.imagining.com *.smtpseguro.imagining.com *.socrates.imagining.com *.soorates.imagining.com *.ssl.imagining.com *.sslvpn2.imagining.com *.staging.imagining.com *.student-mp.imagining.com *.test.imagining.com *.touchtone.imagining.com *.ufkqgrds1.imagining.com *.ultrasound.imagining.com *.vntytstaging.imagining.com *.while.imagining.com *.wtmohqa-cicd.imagining.com *.ww.imagining.com *.ywocdsocrates.imagining.com

Other domains in certificate

*.academy.mrmind.me *.admin.mrmind.me *.b8acf904-283c-4414-bf8b-4b4b8abf4726.mrmind.me *.com739-bbfa-97a57b6a9972.mrmind.me *.cpanel.mrmind.me *.cpcalendars.mrmind.me *.dl.mrmind.me *.forum.mrmind.me *.ftp.mrmind.me *.kphktwp.mrmind.me mrmind.me *.mrmind.me *.new.mrmind.me *.owa.mrmind.me *.remote.mrmind.me *.wp.mrmind.me *.www.mrmind.me
*.admin.planetclickeronline.com *.api.planetclickeronline.com *.demo.planetclickeronline.com *.dev.planetclickeronline.com *.exchangecorp.planetclickeronline.com planetclickeronline.com *.planetclickeronline.com *.rds.planetclickeronline.com *.remote.planetclickeronline.com *.staging.planetclickeronline.com *.test.planetclickeronline.com *.vpn.planetclickeronline.com