Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=goddess-of-healing.me
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 09, 2026
Valid Until
May 10, 2026
87 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:26:5E:99:A4:E4:A1:C4:3F:75:57:07:73:B9:12:EE:49:27:9A:35:4B:FD:EC:90:D0:26:1A:25:EE:2B:F8:56
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
gurden.com
*.gurden.com
*.app.gurden.com
*.assets.gurden.com
*.backup.gurden.com
*.blog.gurden.com
*.cadastro.gurden.com
*.dev.gurden.com
*.hostmaster.gurden.com
*.live.gurden.com
*.mail01.gurden.com
*.radio.gurden.com
*.rodeo.gurden.com
*.sitemaps.gurden.com
*.staging.gurden.com
*.test.gurden.com
*.vpn.gurden.com
*.ww16.gurden.com
*.ww38.gurden.com
1280.it
*.1280.it
*.ii.1280.it
632513.co
*.632513.co
*.dev.632513.co
assetsuper.com.au
*.assetsuper.com.au
*.mail.assetsuper.com.au
*.pantianshou.assetsuper.com.au
*.remote.assetsuper.com.au
*.ww25.assetsuper.com.au
brazaletes.net
*.brazaletes.net
*.random.brazaletes.net
energybars.co.za
*.energybars.co.za
*.random.energybars.co.za
goddess-of-healing.me
*.goddess-of-healing.me
*.app.habbie.com
habbie.com
*.habbie.com
*.hostmaster.habbie.com
*.movies.habbie.com
*.radio.habbie.com
*.remote.habbie.com
*.shreky.habbie.com
*.ww45.habbie.com
*.admin.hrdegypt.com
hrdegypt.com
*.hrdegypt.com
*.webmail.hrdegypt.com
*.devtest.majesticinsurance.com
majesticinsurance.com
*.majesticinsurance.com
*.ww17.majesticinsurance.com
*.ww38.majesticinsurance.com
moebel-preiswerter.de
*.moebel-preiswerter.de
motivordner.de
*.motivordner.de
*.admin.purposes.org
purposes.org
*.purposes.org
*.webmail.purposes.org
*.server.smsverify.co.uk
smsverify.co.uk
*.smsverify.co.uk
*.www.smsverify.co.uk
*.admin.spasmodic.com
spasmodic.com
*.spasmodic.com
*.payment.theatech.io
theatech.io
*.theatech.io
*.superset.trasportatore.com
trasportatore.com
*.trasportatore.com
varmvattenberedarevvs-se06.click
*.varmvattenberedarevvs-se06.click
vestsaleet.com
*.vestsaleet.com
vexantra.com
*.vexantra.com
yuannisandongnuan.shop
*.yuannisandongnuan.shop
yxw10.top
*.yxw10.top
zigzag-restaurant.com
*.zigzag-restaurant.com
Other domains in certificate