76/100 SECURITY SCORE

Certificate Information

Subject
CN=soulbarn.be
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 10, 2026
Valid Until
May 11, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C4:95:09:9B:7E:DB:3B:2D:3A:B1:EF:18:12:32:23:57:47:43:8D:B9:AF:21:63:24:52:7C:CD:20:D6:87:7F:9F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
argabrite.com *.argabrite.com *.access.argabrite.com *.admin.argabrite.com *.anyconnect.argabrite.com *.api.argabrite.com *.clientesvpn.argabrite.com *.connect.argabrite.com *.dev.argabrite.com *.emv1.argabrite.com *.exchange.argabrite.com *.ftp.argabrite.com *.gateway.argabrite.com *.hostmaster.argabrite.com *.imap1.argabrite.com *.m.argabrite.com *.mail1.argabrite.com *.mailer.argabrite.com *.mailgate.argabrite.com *.mkbnwtlmktexchange.argabrite.com *.mobileconnect.argabrite.com *.mx2.argabrite.com *.officevpn.argabrite.com *.portal.argabrite.com *.remoteaccess.argabrite.com *.remoto.argabrite.com *.secure.argabrite.com *.secureconnect.argabrite.com *.securevpn.argabrite.com *.server.argabrite.com *.smtp.argabrite.com *.ssl.argabrite.com *.studentsvpn.argabrite.com *.test.argabrite.com *.tlmktexchange.argabrite.com *.vpn.argabrite.com *.vpn1.argabrite.com *.vpn3.argabrite.com *.vpnssl.argabrite.com *.webmail.argabrite.com *.webvpn.argabrite.com *.ww16.argabrite.com *.ww17.argabrite.com *.ww38.argabrite.com

Other domains in certificate

*.ad.adam77.one adam77.one *.adam77.one *.adblock.adam77.one *.adguard1.adam77.one *.admin.adam77.one *.app.adam77.one *.doh.adam77.one *.hostmaster.adam77.one *.nbbpvsitemaps.adam77.one *.sitemap.adam77.one *.sitemaps.adam77.one *.www.adam77.one
bazionline88o.club *.bazionline88o.club *.ww25.bazionline88o.club
*.api.craftgirlfriend.com craftgirlfriend.com *.craftgirlfriend.com *.mta.craftgirlfriend.com
*.1d44b469-92af-4e91-aff3-2a470f7fe3c4.dreamstreamed.com *.api.dreamstreamed.com *.dev.dreamstreamed.com dreamstreamed.com *.dreamstreamed.com *.remote.dreamstreamed.com *.www.dreamstreamed.com
*.admin.jambonline.org *.app.jambonline.org *.bbs.jambonline.org *.dev.jambonline.org *.home.jambonline.org *.hostmaster.jambonline.org jambonline.org *.jambonline.org *.m.jambonline.org *.news.jambonline.org *.remote.jambonline.org *.w.jambonline.org *.wap.jambonline.org *.web.jambonline.org *.ww.jambonline.org *.ww4.jambonline.org *.www.jambonline.org
soulbarn.be *.soulbarn.be