74/100 SECURITY SCORE

Certificate Information

Subject
CN=bil360.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 19, 2026
Valid Until
August 17, 2026 74 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B3:0F:58:33:92:FC:06:D1:30:9B:D9:17:33:29:25:FD:15:D6:29:8F:05:3F:04:BE:6C:9A:65:CA:76:1F:B3:AE
Alternative Names

Security Configuration

TLS Protocols
Forward Secrecy
Limited (Check cipher configuration)
Warnings
  • TLS 1.3 is not supported (recommended)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

74 domains
lifexd.com *.lifexd.com *.rds.lifexd.com

Other domains in certificate

apikecpapuabaratdaya.org *.apikecpapuabaratdaya.org *.gv2ks0.apikecpapuabaratdaya.org
*.2e6a1d99-db27-4070-9c18-dd3c9ce93c59.bil360.com *.admin.bil360.com *.api.bil360.com *.argo.bil360.com *.assets.bil360.com *.backend.bil360.com *.bi.bil360.com bil360.com *.bil360.com *.ca.bil360.com *.cancel.bil360.com *.ci-preprod.bil360.com *.complete.bil360.com *.dash.bil360.com *.dashboard.bil360.com *.dashs.bil360.com *.demo.bil360.com *.dev.bil360.com *.emv1.bil360.com *.forecast.bil360.com *.forum.bil360.com *.ftp.bil360.com *.fw.bil360.com *.hao.bil360.com *.hostmaster.bil360.com *.ifrkyhao.bil360.com *.intelligence.bil360.com *.intranet.bil360.com *.live.bil360.com *.m.bil360.com *.mail.bil360.com *.nfjakci-preprod.bil360.com *.notexistsww.bil360.com *.novell.bil360.com *.ohytlwmshuemv1.bil360.com *.pay.bil360.com *.pingdom.bil360.com *.portal.bil360.com *.random.bil360.com *.redash.bil360.com *.remote.bil360.com *.reporting.bil360.com *.research.bil360.com *.s1.bil360.com *.secure.bil360.com *.shop.bil360.com *.staging.bil360.com *.store.bil360.com *.superset.bil360.com *.teacher.bil360.com *.test.bil360.com *.uat.bil360.com *.upos-sz-estgcos.bil360.com *.vc.bil360.com *.vpn.bil360.com *.web2.bil360.com *.webmail.bil360.com *.ww.bil360.com *.www.bil360.com *.zimbra.bil360.com
moonlitten.info *.moonlitten.info
*.afx75u.orbit-leaf-core.cloud orbit-leaf-core.cloud *.orbit-leaf-core.cloud
*.mqii8c.wawegaze-core.club wawegaze-core.club *.wawegaze-core.club