Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=laserskinmedical.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 11, 2025
Valid Until
March 11, 2026
31 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:6E:F9:3F:B9:84:F2:D3:37:0E:B8:32:B5:00:7B:BC:1E:1D:88:FB:40:28:D0:B6:E3:62:DF:95:94:22:05:53
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
split.social
*.split.social
lander.consulting
*.lander.consulting
laserskinmedical.com
*.laserskinmedical.com
levi.pink
*.levi.pink
levl.bio
*.levl.bio
life-scan.info
*.life-scan.info
lifeonthesmileyfarm.com
*.lifeonthesmileyfarm.com
lifepuppet.com
*.lifepuppet.com
lifestyledesign.life
*.lifestyledesign.life
lift.blue
*.lift.blue
ligorispizza.com
*.ligorispizza.com
littleponybaby.store
*.littleponybaby.store
liveatevolve.com
*.liveatevolve.com
livefreefoodstore.com
*.livefreefoodstore.com
livexgirls.com
*.livexgirls.com
*.fe.orb.money
orb.money
*.orb.money
speciale-cars.co.uk
*.speciale-cars.co.uk
sportwapens.be
*.sportwapens.be
stories.llc
*.stories.llc
struttindownsouth.com
*.struttindownsouth.com
taqueriacachanilla.com
*.taqueriacachanilla.com
taringa.pro
*.taringa.pro
telegram.careers
*.telegram.careers
telluridevetclinic.com
*.telluridevetclinic.com
thebelltentpartyhire.co.uk
*.thebelltentpartyhire.co.uk
thegeorgeanddragon-watton.co.uk
*.thegeorgeanddragon-watton.co.uk
thetherapeuticalpaca.com
*.thetherapeuticalpaca.com
topoffersdeals.online
*.topoffersdeals.online
trustspilots.com
*.trustspilots.com
ulkemyasammerkezi.com
*.ulkemyasammerkezi.com
updoghtx.com
*.updoghtx.com
vailon.pro
*.vailon.pro
vegamovies.team
*.vegamovies.team
vegamovies.voto
*.vegamovies.voto
wana.today
*.wana.today
wasabisa.com
*.wasabisa.com
web-trading.com
*.web-trading.com
weekofwonder.com
*.weekofwonder.com
workinginterests.com
*.workinginterests.com
wowshiggy.com
*.wowshiggy.com
wthrskincare.com
*.wthrskincare.com
wudics.com
*.wudics.com
yinghuacili.com
*.yinghuacili.com
zt-za.zone
*.zt-za.zone
Other domains in certificate