Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ytsongcan.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 13, 2026
Valid Until
May 14, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
85:71:66:8D:91:7F:5F:8A:34:3F:84:AA:FB:FC:3A:02:4B:75:F9:AB:9D:6B:51:43:3A:6F:C8:FB:88:76:97:85
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
mapleland.com
*.mapleland.com
*.api.mapleland.com
*.att.mapleland.com
*.backup.mapleland.com
*.lime.mapleland.com
*.sitemaps.mapleland.com
*.support.mapleland.com
*.test.mapleland.com
*.ww16.mapleland.com
380mh.com
*.380mh.com
archesbandb.com
*.archesbandb.com
brightstake.com
*.brightstake.com
*.random.brightstake.com
cejournal.net
*.cejournal.net
*.smtps.cejournal.net
*.ww38.cejournal.net
dictionary.studio
*.dictionary.studio
*.typing.dictionary.studio
foambeachwear.com
*.foambeachwear.com
*.webmail.foambeachwear.com
freshnudes.de
*.freshnudes.de
fumacrom.co
*.fumacrom.co
*.random.fumacrom.co
*.ww25.fumacrom.co
*.2fwww.gurugaleri.com
*.checkout.gurugaleri.com
*.computernetwork.gurugaleri.com
*.computertechnology.gurugaleri.com
*.fwww.gurugaleri.com
gurugaleri.com
*.gurugaleri.com
*.mycomputernetwork.gurugaleri.com
*.ww1.gurugaleri.com
*.www.gurugaleri.com
*.hostmaster.magiac-offroad.de
magiac-offroad.de
*.magiac-offroad.de
*.asta.qse.me
*.durmio.qse.me
*.fijate.qse.me
*.hostmaster.qse.me
*.la.qse.me
*.m.qse.me
*.mire.qse.me
*.pasa.qse.me
qse.me
*.qse.me
*.quiera.qse.me
*.sea.qse.me
*.seamo.qse.me
*.sera.qse.me
*.wildcard.qse.me
*.ww25.qse.me
rfsjuxlip.com
*.rfsjuxlip.com
*.wwww.rfsjuxlip.com
riffat.com
*.riffat.com
*.ww1.riffat.com
serenitygardenpaths.live
*.serenitygardenpaths.live
*.ads.sexyworkers.com
*.bean.sexyworkers.com
*.cpanel.sexyworkers.com
*.cruise.sexyworkers.com
*.pt.sexyworkers.com
sexyworkers.com
*.sexyworkers.com
*.sip.sexyworkers.com
*.www-1.sexyworkers.com
striping.services
*.striping.services
*.mail.were.it
were.it
*.were.it
*.abbd815a-4b99-40f2-af6c-a8982caabff6.ytsongcan.com
*.vpn.ytsongcan.com
ytsongcan.com
*.ytsongcan.com
yusuf.life
*.yusuf.life
Other domains in certificate