Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sikh-religion.de
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 19, 2026
Valid Until
May 20, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E8:16:A7:A5:AF:43:EC:74:9A:94:04:49:45:54:DE:19:9B:CB:D9:47:50:66:FE:20:7E:FA:4F:AB:CE:A0:82:14
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
clairns.com
*.clairns.com
*.backup.clairns.com
*.beta.clairns.com
*.crm.clairns.com
*.demo.clairns.com
*.ebay.clairns.com
*.forums.clairns.com
*.help.clairns.com
*.remote.clairns.com
*.sitemap.clairns.com
*.store.clairns.com
*.ww01.clairns.com
*.ww1.clairns.com
*.ww16.clairns.com
*.ww17.clairns.com
*.ww25.clairns.com
*.ww38.clairns.com
aleaf.xyz
*.aleaf.xyz
*.dh.aleaf.xyz
*.zy.aleaf.xyz
aprendedigital.co
*.aprendedigital.co
*.costurapremium.aprendedigital.co
*.cpanel.aprendedigital.co
*.lcvn.aprendedigital.co
*.www.aprendedigital.co
conversiongarden.com
*.conversiongarden.com
*.hostmaster.conversiongarden.com
currentmagazine.com
*.currentmagazine.com
*.d.gayrodeo.top
gayrodeo.top
*.gayrodeo.top
*.sitemap.gayrodeo.top
*.www.gayrodeo.top
keovip5sao.com
*.keovip5sao.com
*.www.keovip5sao.com
kiuogcdqjx.com
*.kiuogcdqjx.com
*.www.kiuogcdqjx.com
*.ki.pitai.me
pitai.me
*.pitai.me
*.beta.project-boobies.xyz
*.ci-poc.project-boobies.xyz
project-boobies.xyz
*.project-boobies.xyz
realistic.name
*.realistic.name
*.v.realistic.name
*.app.resign.it
*.bbs.resign.it
*.bigdata.resign.it
*.gace.resign.it
*.idc.resign.it
resign.it
*.resign.it
*.smkxxy.resign.it
*.comune.scholarships-international.com
scholarships-international.com
*.scholarships-international.com
sikh-religion.de
*.sikh-religion.de
*.www.sikh-religion.de
*.cpanel.thermalcookware.com.au
*.cpcalendars.thermalcookware.com.au
thermalcookware.com.au
*.thermalcookware.com.au
*.ww25.thermalcookware.com.au
*.ww38.thermalcookware.com.au
*.87.topdesk.online
*.alpha.topdesk.online
*.kw1c.topdesk.online
topdesk.online
*.topdesk.online
*.hostmaster.watchseries.sx
*.w.watchseries.sx
watchseries.sx
*.watchseries.sx
*.ww17.watchseries.sx
*.www.watchseries.sx
*.nl.wworganization.com
*.webmail.wworganization.com
wworganization.com
*.wworganization.com
Other domains in certificate