Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=scholarshipguider.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 18, 2026
Valid Until
January 16, 2027 80 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
76:59:04:DD:FE:7E:0D:BF:62:ED:CF:48:F3:DC:36:01:5F:B4:EE:53:C9:E9:37:9C:8A:0B:8B:34:6F:F4:F8:64
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

75 domains
selectwinetours.com *.selectwinetours.com *.231b4d4d-74a5-4b83-9bc5-a835ffa11cd5.selectwinetours.com *.cpanel.selectwinetours.com *.v2.selectwinetours.com *.webmail.selectwinetours.com

Other domains in certificate

*.crm.crypto-nerds.de crypto-nerds.de *.crypto-nerds.de *.mailrelay.crypto-nerds.de *.office.crypto-nerds.de *.pop3.crypto-nerds.de *.sitemap.crypto-nerds.de
*.backoffice.lumaro.digital *.dashboard.lumaro.digital lumaro.digital *.lumaro.digital *.preview.lumaro.digital *.staging.lumaro.digital *.ww38.lumaro.digital
mbestcasinolist.info *.mbestcasinolist.info *.ww16.mbestcasinolist.info
nneux.top *.nneux.top *.rkuvx.nneux.top *.tzygd.nneux.top
*.admin.paydayloansgeek.com *.api.paydayloansgeek.com *.autodiscover.paydayloansgeek.com *.ci-production.paydayloansgeek.com *.login.paydayloansgeek.com *.main.paydayloansgeek.com paydayloansgeek.com *.paydayloansgeek.com *.prod2.paydayloansgeek.com *.prod3.paydayloansgeek.com *.remote.paydayloansgeek.com *.sitemap.paydayloansgeek.com *.staging-pipeline.paydayloansgeek.com *.uat-cicd.paydayloansgeek.com *.web.paydayloansgeek.com *.web3.paydayloansgeek.com
*.bobath.przeworsk.com *.ciecie-woda.przeworsk.com przeworsk.com *.przeworsk.com *.santander.przeworsk.com *.sauna.przeworsk.com
*.e.rinkit.uk rinkit.uk *.rinkit.uk
*.hermes.scholarshipguider.com scholarshipguider.com *.scholarshipguider.com
*.mta-sts.schulzentrum-saterland.de schulzentrum-saterland.de *.schulzentrum-saterland.de
*.blog.tuffstuffdesign.com.au tuffstuffdesign.com.au *.tuffstuffdesign.com.au
*.employeesclose.turkishaffects.org.uk *.navigated.turkishaffects.org.uk turkishaffects.org.uk *.turkishaffects.org.uk
*.analysis.vampire.bio *.analytics.vampire.bio *.app.vampire.bio *.auth.vampire.bio *.backend.vampire.bio *.exbi.vampire.bio *.random.vampire.bio *.sitemaps.vampire.bio vampire.bio *.vampire.bio