Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=pusatmeki.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 07, 2026
Valid Until
May 08, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F5:E3:1D:5C:8D:95:BD:EF:FD:F3:70:13:36:7B:08:6A:96:BC:73:AE:78:02:C1:AA:C0:92:59:DC:2F:39:8F:88
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
szona.com *.szona.com *.sitemap.szona.com *.www.szona.com

Other domains in certificate

asantee.net *.asantee.net
aspiracion.com *.aspiracion.com *.beta.aspiracion.com *.dataviz.aspiracion.com *.ww16.aspiracion.com
balloonad.com *.balloonad.com *.demo.balloonad.com
*.31cc7e3e-8b3e-4661-8cc0-d11c7d81b7a0.barantula.com *.backend.barantula.com barantula.com *.barantula.com *.gitlab.barantula.com *.rds.barantula.com *.rdweb.barantula.com *.test.barantula.com *.vpn.barantula.com *.zyazgm.barantula.com
blingpixie.com *.blingpixie.com *.ww12.blingpixie.com
cgcafe.com *.cgcafe.com *.www.cgcafe.com
cniaragaronifasdalrind.cyou *.cniaragaronifasdalrind.cyou *.ebmail.cniaragaronifasdalrind.cyou *.www.cniaragaronifasdalrind.cyou
flixtors.to *.flixtors.to
glacierhikers.com *.glacierhikers.com *.ildcard.glacierhikers.com
grachillvision.com *.grachillvision.com
gunshow.org *.gunshow.org *.ww42.gunshow.org
jeanhoffman.net *.jeanhoffman.net
*.g.kbuy.org kbuy.org *.kbuy.org
madelucosmetic.com *.madelucosmetic.com *.ww38.madelucosmetic.com
needmorecustomers.com *.needmorecustomers.com *.server.needmorecustomers.com
*.mailserver.oysterfarm.com.au oysterfarm.com.au *.oysterfarm.com.au
*.dev.pampam.com *.guru.pampam.com *.net.pampam.com pampam.com *.pampam.com *.rd.pampam.com *.rdp.pampam.com *.remote1.pampam.com *.remoteapps1.pampam.com *.rustore.pampam.com *.ty.pampam.com *.vpn.pampam.com *.vpn2.pampam.com *.w.pampam.com
*.mail.paxful.vip paxful.vip *.paxful.vip
*.cpanel.pusatmeki.com *.demo.pusatmeki.com pusatmeki.com *.pusatmeki.com
*.dvwbz.spicastellaris.top *.oasqi.spicastellaris.top spicastellaris.top *.spicastellaris.top
streameadt.sk *.streameadt.sk
*.fishponds-karting.xentric.space *.shaddai-prejean-jail.xentric.space *.tul-en-ingles.xentric.space xentric.space *.xentric.space