76/100 SECURITY SCORE

Certificate Information

Subject
CN=thermagetreatment238379.icu
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 09, 2026
Valid Until
April 09, 2026 54 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1A:E0:2F:35:53:80:F0:B2:D3:E4:94:9B:F2:09:22:EF:A9:EA:59:B1:08:38:5F:6E:19:80:75:D1:09:FE:AE:0E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
bangash.com *.bangash.com *.comune.bangash.com *.demo.bangash.com *.gateway.bangash.com *.majidnoor.bangash.com *.mubassir.bangash.com *.rds.bangash.com *.sardar.bangash.com *.secure.bangash.com *.sso.bangash.com *.ww17.bangash.com

Other domains in certificate

*.dev.htstore.asia htstore.asia *.htstore.asia *.test.htstore.asia *.ww38.htstore.asia
*.com.kreditmotorhonda.xyz *.dealermotorhonda.kreditmotorhonda.xyz *.insight.kreditmotorhonda.xyz *.ipv6.kreditmotorhonda.xyz *.kredithondajabodetabek.kreditmotorhonda.xyz kreditmotorhonda.xyz *.kreditmotorhonda.xyz *.sahabat-honda.kreditmotorhonda.xyz *.ww25.kreditmotorhonda.xyz *.ww38.kreditmotorhonda.xyz *.xyz.kreditmotorhonda.xyz
nov.au *.nov.au
*.app1.powerfan.com *.apps.powerfan.com *.apps2.powerfan.com *.autodiscover.powerfan.com *.cloud.powerfan.com *.connect.powerfan.com *.correo.powerfan.com *.desktops1.powerfan.com *.email.powerfan.com *.ex02.powerfan.com *.gateway.powerfan.com *.hostmaster.powerfan.com *.mail.powerfan.com *.mail3.powerfan.com *.myapps2.powerfan.com *.mymail.powerfan.com *.oa.powerfan.com *.officevpn.powerfan.com *.outlook.powerfan.com *.owa.powerfan.com *.portal.powerfan.com powerfan.com *.powerfan.com *.rd.powerfan.com *.rdp.powerfan.com *.rds.powerfan.com *.rds1.powerfan.com *.rds2.powerfan.com *.rdweb.powerfan.com *.remote.powerfan.com *.remote2.powerfan.com *.remoteapp.powerfan.com *.remoteapp1.powerfan.com *.remoteapps2.powerfan.com *.remoto.powerfan.com *.security.powerfan.com *.signin.powerfan.com *.ssl.powerfan.com *.sslvpn.powerfan.com *.sslvpn2.powerfan.com *.sslvpn3.powerfan.com *.virtualaccess.powerfan.com *.vpn.powerfan.com *.vpn1.powerfan.com *.vpn2.powerfan.com *.vpn3.powerfan.com *.webmail.powerfan.com *.webvpn.powerfan.com *.wildcard.powerfan.com *.ww.powerfan.com *.ww1.powerfan.com *.ww11.powerfan.com *.ww16.powerfan.com *.ww17.powerfan.com *.ww25.powerfan.com *.ww38.powerfan.com *.www.powerfan.com
thermagetreatment238379.icu *.thermagetreatment238379.icu *.ww25.thermagetreatment238379.icu