75/100 SECURITY SCORE

Certificate Information

Subject
CN=concursolution.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 06, 2026
Valid Until
February 04, 2027 81 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
70:78:B7:D2:6D:C7:AF:36:F6:E1:1D:59:96:EA:B7:B6:4E:75:8C:F2:01:82:94:86:EB:95:3C:9E:4E:46:40:D7
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

86 domains
bitesizebeats.com *.bitesizebeats.com *.1582598470.bitesizebeats.com *.admin.bitesizebeats.com *.app.bitesizebeats.com *.autodiscover.bitesizebeats.com *.ci.bitesizebeats.com *.cms.bitesizebeats.com *.console.bitesizebeats.com *.dashboard.bitesizebeats.com *.dev.bitesizebeats.com *.hostmaster.bitesizebeats.com *.internal.bitesizebeats.com *.portal.bitesizebeats.com *.staging.bitesizebeats.com *.store.bitesizebeats.com *.test.bitesizebeats.com *.ww25.bitesizebeats.com *.www.bitesizebeats.com

Other domains in certificate

*.a1udaipurescorts.aditiroy.biz aditiroy.biz *.aditiroy.biz *.ahmedabadescorts.aditiroy.biz *.ahmedabadescortsservice.aditiroy.biz *.daizysah.aditiroy.biz *.funahmedabadescorts.aditiroy.biz *.udaipurescortss.aditiroy.biz
*.aoi.concursolution.com *.api.concursolution.com concursolution.com *.concursolution.com *.eu2.concursolution.com *.implemantation.concursolution.com *.implementation.concursolution.com *.implementations.concursolution.com *.su2.concursolution.com *.us2.concursolution.com *.ww16.concursolution.com
*.admin.constructioncontainer.com constructioncontainer.com *.constructioncontainer.com *.email.constructioncontainer.com *.hostmaster.constructioncontainer.com *.mail.constructioncontainer.com *.ns1.constructioncontainer.com
*.app.eduaverse.com *.dashboard.eduaverse.com eduaverse.com *.eduaverse.com *.phpmyadmin.eduaverse.com *.secure.eduaverse.com
*.dddd.escortdamen.com escortdamen.com *.escortdamen.com *.sitemap.escortdamen.com
*.666.fantee.net *.api.fantee.net *.backend.fantee.net fantee.net *.fantee.net *.random.fantee.net *.staging.fantee.net *.vip.fantee.net *.ww.fantee.net
*.cbs.freshamateurs.com *.forum.freshamateurs.com freshamateurs.com *.freshamateurs.com
*.com.harusnaik.lol harusnaik.lol *.harusnaik.lol
*.app.tortiller.com tortiller.com *.tortiller.com
*.store.vip-coin.com vip-coin.com *.vip-coin.com
*.dvhyd3qjjc.wwwcmr.com *.ehgf2pij4r.wwwcmr.com *.ha1fd0wcu4.wwwcmr.com *.mqpez5cx6t.wwwcmr.com *.mx.wwwcmr.com *.ww1.wwwcmr.com wwwcmr.com *.wwwcmr.com *.xcxjvr3909.wwwcmr.com