Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=classyflyer.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E2:82:66:01:EB:54:63:48:67:EB:35:E0:0B:52:9A:58:66:C7:3C:62:59:4A:34:FB:A6:FC:EB:38:CF:6C:A6:F9
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
resail.com *.resail.com *.api.resail.com *.connectvpn.resail.com *.dev.resail.com *.gateway.resail.com *.gp.resail.com *.mail.resail.com *.portal.resail.com *.remote.resail.com *.remoteaccess.resail.com *.sslvpn.resail.com *.test.resail.com *.vpn.resail.com *.webconnect.resail.com

Other domains in certificate

713194.vip *.713194.vip *.admin.713194.vip *.intranet.713194.vip *.portal.713194.vip *.shop.713194.vip *.store.713194.vip
bonanzaslot88login.click *.bonanzaslot88login.click
chainrefinance.com *.chainrefinance.com *.mx.chainrefinance.com *.www.chainrefinance.com
classyflyer.com *.classyflyer.com *.hostmaster.classyflyer.com *.m.classyflyer.com *.remote.classyflyer.com *.vpn.classyflyer.com *.www.classyflyer.com
hestreameast.fun *.hestreameast.fun
*.admin.leschevaliersdemeraude.fr *.administration.leschevaliersdemeraude.fr *.api.leschevaliersdemeraude.fr *.app.leschevaliersdemeraude.fr *.blog.leschevaliersdemeraude.fr *.dev.leschevaliersdemeraude.fr *.forum.leschevaliersdemeraude.fr leschevaliersdemeraude.fr *.leschevaliersdemeraude.fr *.mail.leschevaliersdemeraude.fr *.partner.leschevaliersdemeraude.fr *.prod.leschevaliersdemeraude.fr *.remote.leschevaliersdemeraude.fr *.staging.leschevaliersdemeraude.fr *.support.leschevaliersdemeraude.fr *.telecommande.leschevaliersdemeraude.fr *.user.leschevaliersdemeraude.fr *.vpn.leschevaliersdemeraude.fr *.wp.leschevaliersdemeraude.fr *.www.leschevaliersdemeraude.fr
retirementfinanceguide.com *.retirementfinanceguide.com
ricskingdom.sbs *.ricskingdom.sbs
sexwl.com *.sexwl.com *.users.sexwl.com
shgffushi.com *.shgffushi.com
sportcommercialsolarexchange.com *.sportcommercialsolarexchange.com
*.go.sqq1-cloud.click sqq1-cloud.click *.sqq1-cloud.click
thenextstop.it *.thenextstop.it
thesimplysellingacademy.com *.thesimplysellingacademy.com
ugyfelkapu.com *.ugyfelkapu.com *.ww16.ugyfelkapu.com
*.banka.xn--kbt916cznb3zslo2a.com *.bankovnictvi.xn--kbt916cznb3zslo2a.com *.internetbanka.xn--kbt916cznb3zslo2a.com *.login.xn--kbt916cznb3zslo2a.com *.logon.xn--kbt916cznb3zslo2a.com *.mojebanka.xn--kbt916cznb3zslo2a.com *.pay.xn--kbt916cznb3zslo2a.com *.prihlaseni.xn--kbt916cznb3zslo2a.com xn--kbt916cznb3zslo2a.com *.xn--kbt916cznb3zslo2a.com
yourverve.com *.yourverve.com