Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=pointwonder.site
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 27, 2026
Valid Until
April 27, 2026
77 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
33:05:8C:36:3A:69:1B:90:9D:45:75:D8:8A:85:B4:2D:71:FC:D2:96:E6:4E:97:B2:C5:2F:80:FA:95:55:0A:E3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
sadogate.com
*.sadogate.com
*.mail.sadogate.com
1000kindo.com
*.1000kindo.com
*.comune.1000kindo.com
*.mail.1000kindo.com
*.mx.1000kindo.com
*.nisshin-togo.1000kindo.com
coco-mali.com
*.coco-mali.com
*.www.coco-mali.com
*.2013-2341595.cpc.cm
cpc.cm
*.cpc.cm
*.sxy.cpc.cm
*.ww17.cpc.cm
cureconnect.info
*.cureconnect.info
*.hostmaster.cureconnect.info
explicitgamer.com
*.explicitgamer.com
*.www.explicitgamer.com
flaviamoura.site
*.flaviamoura.site
*.ww16.flaviamoura.site
gnomezane.com
*.gnomezane.com
*.hostmaster.gnomezane.com
hibbettcareers.com
*.hibbettcareers.com
*.random.hibbettcareers.com
*.6e52d553-cb4d-4604-81e1-eb60d53af024.iosmirro.cc
*.847ae8b2-89ce-4c23-a60f-aba43b505739.iosmirro.cc
iosmirro.cc
*.iosmirro.cc
*.www.iosmirro.cc
lunatogel126.com
*.lunatogel126.com
*.rdweb.lunatogel126.com
*.9843f923-9474-43bf-84a6-c66b3777496f.lvry.com
*.alpha.lvry.com
*.cjuqk.lvry.com
*.equbt.lvry.com
*.host.lvry.com
*.landryserp.lvry.com
lvry.com
*.lvry.com
*.mail.lvry.com
*.me.lvry.com
*.ww25.lvry.com
*.ww41.lvry.com
*.www.lvry.com
midwesttrader.com.au
*.midwesttrader.com.au
*.ww16.midwesttrader.com.au
*.ww25.midwesttrader.com.au
*.ww38.midwesttrader.com.au
minzdravra.org
*.minzdravra.org
*.www.minzdravra.org
muskmetaverse.io
*.muskmetaverse.io
*.random.muskmetaverse.io
*.payments.pointwonder.site
pointwonder.site
*.pointwonder.site
*.bridge.ptcscan.io
*.docs.ptcscan.io
*.explorer-testnet.ptcscan.io
*.explorer.ptcscan.io
*.faucet.ptcscan.io
ptcscan.io
*.ptcscan.io
*.rpc-testnet.ptcscan.io
*.rpc.ptcscan.io
*.ws-rpc.ptcscan.io
*.magento.queenofte.com
queenofte.com
*.queenofte.com
*.http.sadcenter.net
sadcenter.net
*.sadcenter.net
*.blog.scratchusa.com
*.com.scratchusa.com
scratchusa.com
*.scratchusa.com
*.hostmaster.zyahoo.de
zyahoo.de
*.zyahoo.de
Other domains in certificate