Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=blocksboom.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 15, 2026
Valid Until
August 13, 2026
70 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:1F:77:F0:9F:4A:DD:70:49:C5:88:81:6C:B8:07:29:44:01:0B:36:A7:99:7E:4F:24:6A:03:23:7F:85:CF:06
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
blocksboom.com
*.blocksboom.com
buganda.coffee
*.buganda.coffee
burllink.com
*.burllink.com
carsforsale5746.sbs
*.carsforsale5746.sbs
cc-duae.today
*.cc-duae.today
cosmoaction370.info
*.cosmoaction370.info
dialviews.com
*.dialviews.com
diygeniusideas.live
*.diygeniusideas.live
diyinstruct.live
*.diyinstruct.live
dkabz.qpon
*.dkabz.qpon
dublin-brussels-railway.sbs
*.dublin-brussels-railway.sbs
dublin-london-railway.sbs
*.dublin-london-railway.sbs
ductcleaning-1747315214.today
*.ductcleaning-1747315214.today
duelsociety.com
*.duelsociety.com
empowermyotions.com
*.empowermyotions.com
findakureytech.biz
*.findakureytech.biz
finddataorbitcloud.company
*.finddataorbitcloud.company
findloans.co
*.findloans.co
findpandroutsourcing.biz
*.findpandroutsourcing.biz
findpandroutsourcing.work
*.findpandroutsourcing.work
findptjindustrial.info
*.findptjindustrial.info
findsyncbeacontech.info
*.findsyncbeacontech.info
findtitleleader.company
*.findtitleleader.company
findtitleleader.one
*.findtitleleader.one
fonehome.com
*.fonehome.com
freepornemperor.com
*.freepornemperor.com
guilfordcountyhomes.com
*.guilfordcountyhomes.com
gvlonev.org
*.gvlonev.org
healthmanager360.com
*.healthmanager360.com
high-price-recycling1.click
*.high-price-recycling1.click
huang-dunshoudiaobing.top
*.huang-dunshoudiaobing.top
hubiquofreebuilding.com
*.hubiquofreebuilding.com
huiyao158f.cc
*.huiyao158f.cc
huiyao628m.cc
*.huiyao628m.cc
inkribbonpictures.com
*.inkribbonpictures.com
prelistaj.com
*.prelistaj.com
probyoma.com
*.probyoma.com
skyward.me
*.skyward.me
stamp.asia
*.stamp.asia
streamingocmmunity.wang
*.streamingocmmunity.wang
tinternet.lol
*.tinternet.lol
totality.lol
*.totality.lol
vibesurprize.com
*.vibesurprize.com
vippackag3s.xyz
*.vippackag3s.xyz
vxy012.top
*.vxy012.top
Other domains in certificate