76/100 SECURITY SCORE

Certificate Information

Subject
CN=ytsongcan.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 13, 2026
Valid Until
May 14, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
85:71:66:8D:91:7F:5F:8A:34:3F:84:AA:FB:FC:3A:02:4B:75:F9:AB:9D:6B:51:43:3A:6F:C8:FB:88:76:97:85
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
mapleland.com *.mapleland.com *.api.mapleland.com *.att.mapleland.com *.backup.mapleland.com *.lime.mapleland.com *.sitemaps.mapleland.com *.support.mapleland.com *.test.mapleland.com *.ww16.mapleland.com

Other domains in certificate

380mh.com *.380mh.com
archesbandb.com *.archesbandb.com
brightstake.com *.brightstake.com *.random.brightstake.com
cejournal.net *.cejournal.net *.smtps.cejournal.net *.ww38.cejournal.net
dictionary.studio *.dictionary.studio *.typing.dictionary.studio
foambeachwear.com *.foambeachwear.com *.webmail.foambeachwear.com
freshnudes.de *.freshnudes.de
fumacrom.co *.fumacrom.co *.random.fumacrom.co *.ww25.fumacrom.co
*.2fwww.gurugaleri.com *.checkout.gurugaleri.com *.computernetwork.gurugaleri.com *.computertechnology.gurugaleri.com *.fwww.gurugaleri.com gurugaleri.com *.gurugaleri.com *.mycomputernetwork.gurugaleri.com *.ww1.gurugaleri.com *.www.gurugaleri.com
*.hostmaster.magiac-offroad.de magiac-offroad.de *.magiac-offroad.de
*.asta.qse.me *.durmio.qse.me *.fijate.qse.me *.hostmaster.qse.me *.la.qse.me *.m.qse.me *.mire.qse.me *.pasa.qse.me qse.me *.qse.me *.quiera.qse.me *.sea.qse.me *.seamo.qse.me *.sera.qse.me *.wildcard.qse.me *.ww25.qse.me
rfsjuxlip.com *.rfsjuxlip.com *.wwww.rfsjuxlip.com
riffat.com *.riffat.com *.ww1.riffat.com
serenitygardenpaths.live *.serenitygardenpaths.live
*.ads.sexyworkers.com *.bean.sexyworkers.com *.cpanel.sexyworkers.com *.cruise.sexyworkers.com *.pt.sexyworkers.com sexyworkers.com *.sexyworkers.com *.sip.sexyworkers.com *.www-1.sexyworkers.com
striping.services *.striping.services
*.mail.were.it were.it *.were.it
*.abbd815a-4b99-40f2-af6c-a8982caabff6.ytsongcan.com *.vpn.ytsongcan.com ytsongcan.com *.ytsongcan.com
yusuf.life *.yusuf.life