Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=aureasocial.org
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
64 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
99:99:CA:76:FC:04:21:3F:54:F8:8F:60:1F:BB:60:3A:F0:2C:23:3A:13:25:6C:7D:C0:AF:3B:9B:9F:B0:F8:29
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
harvadpilgrim.org
*.harvadpilgrim.org
*.connect.harvadpilgrim.org
*.rd.harvadpilgrim.org
*.superset.harvadpilgrim.org
*.wap.harvadpilgrim.org
aureasocial.org
*.aureasocial.org
*.caps.aureasocial.org
*.jenkins.aureasocial.org
*.www-dev.aureasocial.org
*.www.aureasocial.org
clubedanoiva.com
*.clubedanoiva.com
*.dev.clubedanoiva.com
conique-55849443.xyz
www.conique-55849443.xyz
*.app.erplite.pro
*.dashboard.erplite.pro
erplite.pro
*.erplite.pro
*.test.erplite.pro
*.workspace.erplite.pro
ethioshop.com
*.ethioshop.com
*.webmail.ethioshop.com
*.api.hotelscalabria.com
hotelscalabria.com
*.hotelscalabria.com
*.notexistsdemo.hotelscalabria.com
*.notexistsstaging.hotelscalabria.com
*.opt.hotelscalabria.com
*.ww42.hotelscalabria.com
*.app.joysclick.com
joysclick.com
*.joysclick.com
*.admin.lord3.pro
*.ataka-titanov-v1.lord3.pro
*.blestjaschie-umy.lord3.pro
*.dino.lord3.pro
lord3.pro
*.lord3.pro
*.mjetlok.lord3.pro
*.mysh.lord3.pro
*.univer-10-let-spustja.lord3.pro
*.00311371.proxyun.com
*.18054777.proxyun.com
*.18268251.proxyun.com
*.20187641.proxyun.com
proxyun.com
*.proxyun.com
*.analytics.prozik.co
*.ping.prozik.co
prozik.co
*.prozik.co
*.admin.rebrand.website
*.dev.rebrand.website
*.hostmaster.rebrand.website
rebrand.website
*.rebrand.website
*.app.restaurantdeparlevinker.nl
restaurantdeparlevinker.nl
*.restaurantdeparlevinker.nl
*.api.skatinggloves.com
*.dashboard.skatinggloves.com
*.rdweb.skatinggloves.com
skatinggloves.com
*.skatinggloves.com
*.web.skatinggloves.com
*.get.winbkk.net
winbkk.net
*.winbkk.net
*.app.xn--1000-jx8f.com
*.mail.xn--1000-jx8f.com
xn--1000-jx8f.com
*.xn--1000-jx8f.com
*.elxvdz.youfindsoul.com
*.lannrw.youfindsoul.com
*.nrmdmw.youfindsoul.com
*.oadbk.youfindsoul.com
*.staging.youfindsoul.com
*.test.youfindsoul.com
*.xbabqw.youfindsoul.com
*.xokvkg.youfindsoul.com
*.xrqrm.youfindsoul.com
*.xzbre.youfindsoul.com
youfindsoul.com
*.youfindsoul.com
*.zozlal.youfindsoul.com
Other domains in certificate