75/100 SECURITY SCORE

Certificate Information

Subject
CN=novaturas.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
November 11, 2026
Valid Until
February 09, 2027 86 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
72:62:44:8A:82:FC:5C:0B:F5:B6:C0:BC:5E:6D:90:10:5E:C0:CB:98:50:38:9A:A8:FF:43:BE:61:4C:12:B5:8A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
narazone.com *.narazone.com *.ceditha.narazone.com *.henuc.narazone.com *.ndowic.narazone.com *.nijaxa.narazone.com *.olequex.narazone.com *.staging.narazone.com *.staxi.narazone.com *.vengixe.narazone.com *.zaabete.narazone.com

Other domains in certificate

nationwide-appliance.com *.nationwide-appliance.com *.wind.nationwide-appliance.com *.ww17.nationwide-appliance.com *.ww25.nationwide-appliance.com *.ww38.nationwide-appliance.com
*.advanced.netdetective.net *.blog.netdetective.net *.com.netdetective.net *.directory.netdetective.net *.hostmaster.netdetective.net *.ndpro.netdetective.net netdetective.net *.netdetective.net *.orders.netdetective.net *.orders3.netdetective.net *.preview.netdetective.net *.search.netdetective.net *.standard.netdetective.net *.ww17.netdetective.net *.www.netdetective.net
*.32.nmgeocaching.com *.bnsc.nmgeocaching.com *.comune.nmgeocaching.com *.cpanel.nmgeocaching.com *.cpcalendars.nmgeocaching.com *.img.nmgeocaching.com *.m.nmgeocaching.com *.mail.nmgeocaching.com *.mx.nmgeocaching.com nmgeocaching.com *.nmgeocaching.com *.order.nmgeocaching.com *.random.nmgeocaching.com *.ww17.nmgeocaching.com
*.fr.novaturas.com novaturas.com *.novaturas.com
*.2.ok824.com *.3dsu8pw.ok824.com *.4as.ok824.com *.5yw48e.ok824.com *.61msi5.ok824.com *.assets.ok824.com *.backup.ok824.com *.blog.ok824.com *.bmltyj2e9h.ok824.com *.ct3.ok824.com *.dev.ok824.com *.ey0x.ok824.com *.gmhtemarketing.ok824.com *.h5.ok824.com *.h6ijlz0bey.ok824.com *.home.ok824.com *.hostmaster.ok824.com *.i.ok824.com *.lsdr.ok824.com *.luzkc40p.ok824.com *.meyxgv9.ok824.com *.new.ok824.com *.ns.ok824.com ok824.com *.ok824.com *.qk.ok824.com *.shop.ok824.com *.uxm.ok824.com *.zs.ok824.com
panoramaupload.co.uk *.panoramaupload.co.uk *.ww17.panoramaupload.co.uk
papa703.cc *.papa703.cc *.ww17.papa703.cc
pasarjp.site *.pasarjp.site *.ww17.pasarjp.site
qfv20w.cc *.qfv20w.cc *.ww17.qfv20w.cc