Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=millenium.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 14, 2026
Valid Until
May 15, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F3:D6:AC:D2:A0:F5:DF:BF:1D:69:64:00:41:16:3A:5B:5F:BF:2D:4D:87:F5:40:A9:65:7C:7A:0F:A0:F2:2B:D9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
75 domains
solvprotocol.app
*.solvprotocol.app
apenkirkegruppe.org
*.apenkirkegruppe.org
arbeidsdeskundige.com
*.arbeidsdeskundige.com
ayw666.com
*.ayw666.com
*.www.ayw666.com
backpackjobs.au
*.backpackjobs.au
bikegames.com.au
*.bikegames.com.au
birlenstock.com
*.birlenstock.com
bzi.de
*.bzi.de
*.schnor.bzi.de
carsofttoprepair.au
*.carsofttoprepair.au
cash4carswashington.com
*.cash4carswashington.com
*.gitlab.cash4carswashington.com
*.ww38.cash4carswashington.com
comedyclubs.com.au
*.comedyclubs.com.au
deem.com.au
*.deem.com.au
delertrack.com
*.delertrack.com
*.delivery.delertrack.com
*.hostmaster.delertrack.com
*.ww38.delertrack.com
djh.au
*.djh.au
*.random.djh.au
fkh.com.au
*.fkh.com.au
*.random.fkh.com.au
*.ww38.fkh.com.au
healthyvibes.com.au
*.healthyvibes.com.au
*.ww38.healthyvibes.com.au
*.www.healthyvibes.com.au
hohumm-campgrounds.com
*.hohumm-campgrounds.com
*.ww38.hohumm-campgrounds.com
jogosdedama.com.br
*.jogosdedama.com.br
*.random.jogosdedama.com.br
karokeversion.com
*.karokeversion.com
millenium.au
*.millenium.au
*.ww38.millenium.au
minigolf.co.za
*.minigolf.co.za
*.random.minigolf.co.za
mycoralcoast.com.au
*.mycoralcoast.com.au
*.random.mycoralcoast.com.au
*.ww38.mycoralcoast.com.au
myinstantprofit.com
*.myinstantprofit.com
polandsprings.com
*.polandsprings.com
*.ww1.polandsprings.com
*.ww25.polandsprings.com
popbands.au
*.popbands.au
yesautosale.com
*.yesautosale.com
*.ww38.zakaat.com
zakaat.com
*.zakaat.com
Other domains in certificate