Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=laserskinmedical.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 11, 2025
Valid Until
March 11, 2026 31 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:6E:F9:3F:B9:84:F2:D3:37:0E:B8:32:B5:00:7B:BC:1E:1D:88:FB:40:28:D0:B6:E3:62:DF:95:94:22:05:53
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
split.social *.split.social

Other domains in certificate

lander.consulting *.lander.consulting
laserskinmedical.com *.laserskinmedical.com
levi.pink *.levi.pink
levl.bio *.levl.bio
life-scan.info *.life-scan.info
lifeonthesmileyfarm.com *.lifeonthesmileyfarm.com
lifepuppet.com *.lifepuppet.com
lifestyledesign.life *.lifestyledesign.life
lift.blue *.lift.blue
ligorispizza.com *.ligorispizza.com
littleponybaby.store *.littleponybaby.store
liveatevolve.com *.liveatevolve.com
livefreefoodstore.com *.livefreefoodstore.com
livexgirls.com *.livexgirls.com
*.fe.orb.money orb.money *.orb.money
speciale-cars.co.uk *.speciale-cars.co.uk
sportwapens.be *.sportwapens.be
stories.llc *.stories.llc
struttindownsouth.com *.struttindownsouth.com
taqueriacachanilla.com *.taqueriacachanilla.com
taringa.pro *.taringa.pro
telegram.careers *.telegram.careers
telluridevetclinic.com *.telluridevetclinic.com
thebelltentpartyhire.co.uk *.thebelltentpartyhire.co.uk
thegeorgeanddragon-watton.co.uk *.thegeorgeanddragon-watton.co.uk
thetherapeuticalpaca.com *.thetherapeuticalpaca.com
topoffersdeals.online *.topoffersdeals.online
trustspilots.com *.trustspilots.com
ulkemyasammerkezi.com *.ulkemyasammerkezi.com
updoghtx.com *.updoghtx.com
vailon.pro *.vailon.pro
vegamovies.team *.vegamovies.team
vegamovies.voto *.vegamovies.voto
wana.today *.wana.today
wasabisa.com *.wasabisa.com
web-trading.com *.web-trading.com
weekofwonder.com *.weekofwonder.com
workinginterests.com *.workinginterests.com
wowshiggy.com *.wowshiggy.com
wthrskincare.com *.wthrskincare.com
wudics.com *.wudics.com
yinghuacili.com *.yinghuacili.com
zt-za.zone *.zt-za.zone