76/100 SECURITY SCORE

Certificate Information

Subject
CN=otx.me
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 13, 2026
Valid Until
April 13, 2026 50 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:FF:55:13:42:02:5C:22:A8:91:E5:EE:E7:CB:BA:58:C7:AD:94:39:34:B2:CB:E8:F7:9A:FA:60:DB:F0:06:1A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
samair.com *.samair.com *.admin.samair.com *.alex.samair.com *.articles.samair.com *.books.samair.com *.client.samair.com *.comune.samair.com *.de.samair.com *.games.samair.com *.gold.samair.com *.m.samair.com *.map.samair.com *.mx.samair.com *.net.samair.com *.openvpn.samair.com *.radio.samair.com *.secure.samair.com *.stage.samair.com *.status.samair.com *.test.samair.com *.umpqestatus.samair.com *.ww16.samair.com *.ww17.samair.com

Other domains in certificate

ana-ero.com *.ana-ero.com *.sitemap.ana-ero.com *.ww7.ana-ero.com *.www.ana-ero.com
camperclub.com *.camperclub.com *.hostmaster.camperclub.com *.lyncdiscover.camperclub.com *.ww11.camperclub.com *.ww16.camperclub.com
impetus.live *.impetus.live *.ww12.impetus.live *.ww38.impetus.live *.www.impetus.live
*.helpdesk.mangajix.com *.idaho.mangajix.com mangajix.com *.mangajix.com *.ww16.mangajix.com *.ww25.mangajix.com
*.cdn.newasianpornpics.com *.hostmaster.newasianpornpics.com newasianpornpics.com *.newasianpornpics.com *.ww25.newasianpornpics.com
*.mail.otx.me otx.me *.otx.me
pornocasero.cc *.pornocasero.cc *.sitemap.pornocasero.cc *.ww25.pornocasero.cc *.ww38.pornocasero.cc *.www.pornocasero.cc
*.demo.puppiea.com puppiea.com *.puppiea.com *.ww25.puppiea.com *.ww38.puppiea.com
survey-b.xyz *.survey-b.xyz *.ww16.survey-b.xyz *.ww38.survey-b.xyz
vyempire.xyz *.vyempire.xyz *.ww16.vyempire.xyz *.ww25.vyempire.xyz
*.16.weianrenfang.com *.bigluo.weianrenfang.com *.cms.weianrenfang.com *.crwgks.weianrenfang.com *.eagles.weianrenfang.com *.fkgdil.weianrenfang.com *.giving.weianrenfang.com *.i7.weianrenfang.com *.igb.weianrenfang.com *.qialen.weianrenfang.com *.u6j3.weianrenfang.com *.usmauz.weianrenfang.com weianrenfang.com *.weianrenfang.com *.weremember.weianrenfang.com *.you.weianrenfang.com