76/100 SECURITY SCORE

Certificate Information

Subject
CN=09620.pet
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 22, 2026
Valid Until
July 21, 2026 68 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
77:3A:E8:16:7F:BD:DD:FD:F5:34:F8:78:DB:BC:B0:04:73:A8:A5:CF:CE:B3:44:57:3B:98:78:4B:86:71:84:E7
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
chainmaterial.com *.chainmaterial.com

Other domains in certificate

09620.pet *.09620.pet
10glife.com *.10glife.com
17031.pet *.17031.pet
63799.one *.63799.one
64617.one *.64617.one
businesswebname.com *.businesswebname.com
bzgth.reviews *.bzgth.reviews
canadianstogether.com *.canadianstogether.com
capstone-markets.com *.capstone-markets.com
careervoyagehub.xyz *.careervoyagehub.xyz
casinodrip.bond *.casinodrip.bond
celebrityportraitart.com *.celebrityportraitart.com
chainambition.com *.chainambition.com *.marketing.chainambition.com
check-you-mental-health-br.sbs *.check-you-mental-health-br.sbs
chessairways.com *.chessairways.com
cs.cash *.cs.cash
curseofcleveland.com *.curseofcleveland.com
cyberhorizonlogic.company *.cyberhorizonlogic.company
dishwasherjobsuk.sbs *.dishwasherjobsuk.sbs
divahaut.com *.divahaut.com
epiktravel.fun *.epiktravel.fun
haters.co *.haters.co
krawl.xyz *.krawl.xyz
landdesignsoutn.com *.landdesignsoutn.com
mainyukgacor313.top *.mainyukgacor313.top *.q2s8t.mainyukgacor313.top
plustube.pro *.plustube.pro
pol88aa.xyz *.pol88aa.xyz
rebfgcz1602.vip *.rebfgcz1602.vip
replications.ca *.replications.ca
rhypton.club *.rhypton.club
solcasino-2006.com *.solcasino-2006.com
sppin.fishing *.sppin.fishing
the-british-in-spain.com *.the-british-in-spain.com
thrivingspace.com *.thrivingspace.com
tina.cfd *.tina.cfd
tip88.bid *.tip88.bid
touraroundisrael.com *.touraroundisrael.com
tzzb.app *.tzzb.app
udlnz.reviews *.udlnz.reviews
ultimateonchain.com *.ultimateonchain.com
uvhajmczl.biz *.uvhajmczl.biz
wwcp812.xyz *.wwcp812.xyz
x4tepme.cc *.x4tepme.cc