76/100 SECURITY SCORE

Certificate Information

Subject
CN=ieltsparare.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 02, 2026
Valid Until
August 31, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:30:73:34:72:AD:89:07:FA:A0:F5:03:95:8B:C7:C6:1F:90:31:E4:EE:16:4F:69:4D:2E:36:6C:E0:94:7C:16
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pensong.com *.pensong.com

Other domains in certificate

1234bets10giris.com *.1234bets10giris.com
202ddd437.top *.202ddd437.top
2n8jnnuuow.top *.2n8jnnuuow.top
345555.vip *.345555.vip
39885.wang *.39885.wang
450150.com *.450150.com
50616.mobi *.50616.mobi
675130.one *.675130.one
78452.one *.78452.one
79176.one *.79176.one
ieltsparare.com *.ieltsparare.com
kcc-coffee.org *.kcc-coffee.org
myhouse7.site *.myhouse7.site
nedeljkovic-im.com *.nedeljkovic-im.com
nettrackerpro.com *.nettrackerpro.com
nevadatech.org *.nevadatech.org
nightcore.onl *.nightcore.onl
numenor.vc *.numenor.vc
oauwvp.work *.oauwvp.work
occipitosphenoidal.com *.occipitosphenoidal.com
ofchkhmavxnxhhq2.com *.ofchkhmavxnxhhq2.com
oklahomawatchdata.org *.oklahomawatchdata.org
olusturum.info *.olusturum.info
ooooooooxdhkujuayrrg.com *.ooooooooxdhkujuayrrg.com
panconciliatory.com *.panconciliatory.com
pheka.loan *.pheka.loan
philosophister.com *.philosophister.com
play8.app *.play8.app
polymolecular.com *.polymolecular.com
pornocaldo.com *.pornocaldo.com
prime-trades.pro *.prime-trades.pro
private-caregiver-2-mb4.click *.private-caregiver-2-mb4.click
pseudodox.com *.pseudodox.com
psychichthys.com *.psychichthys.com
pterygogenea.com *.pterygogenea.com
qlukzk.town *.qlukzk.town
qnbvvw.top *.qnbvvw.top
qpl28dns94xcmwek.top *.qpl28dns94xcmwek.top
qundus.com *.qundus.com
quoddies.com *.quoddies.com
r05l1b.shop *.r05l1b.shop
ralinkpaper.site *.ralinkpaper.site
realmadventure21.shop *.realmadventure21.shop
ristorantedasilviofossaticasamilano.onl *.ristorantedasilviofossaticasamilano.onl