Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=posterce.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 07, 2026
Valid Until
May 08, 2026
76 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
47:5F:88:4D:03:B8:E3:F9:B0:81:51:24:C4:15:01:A0:27:A7:C7:B8:C2:95:D6:64:5D:AA:04:9B:42:DF:83:BE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
harek.com
*.harek.com
*.admin.harek.com
*.app.harek.com
*.blog.harek.com
*.hostmaster.harek.com
*.m.harek.com
*.test.harek.com
*.ws.harek.com
*.ww11.harek.com
*.ww38.harek.com
autoglopedia.com
*.autoglopedia.com
*.demo.autoglopedia.com
*.hargajasaartikel.autoglopedia.com
*.negeribelanja.autoglopedia.com
*.2025.bili-distribution.com
*.admin.bili-distribution.com
*.api.bili-distribution.com
*.app.bili-distribution.com
bili-distribution.com
*.bili-distribution.com
*.brand.bili-distribution.com
*.demo.bili-distribution.com
*.dev.bili-distribution.com
*.hub.bili-distribution.com
bright-and-sparkling.co.uk
*.bright-and-sparkling.co.uk
*.cullens.bright-and-sparkling.co.uk
*.danni-and-ray-howe.bright-and-sparkling.co.uk
*.danni.bright-and-sparkling.co.uk
*.lennie.bright-and-sparkling.co.uk
*.mail.bright-and-sparkling.co.uk
*.translations.bright-and-sparkling.co.uk
*.update.bright-and-sparkling.co.uk
*.webmail.bright-and-sparkling.co.uk
*.wedding.bright-and-sparkling.co.uk
clarin.es
*.clarin.es
darlings.au
*.darlings.au
*.random.darlings.au
doramas.online
*.doramas.online
*.random.doramas.online
ebikescost-in.space
*.ebikescost-in.space
fmovies.stream
*.fmovies.stream
*.hostmaster.fmovies.stream
*.m.fmovies.stream
*.mail.fmovies.stream
*.ww16.fmovies.stream
*.ww7.fmovies.stream
*.www.fmovies.stream
*.discovery.furniturecover.com
furniturecover.com
*.furniturecover.com
*.keith.furniturecover.com
*.random.furniturecover.com
*.ww16.furniturecover.com
*.ww25.furniturecover.com
haydi.bet
*.haydi.bet
*.bi.inthenews.it
inthenews.it
*.inthenews.it
overthedoors.it
*.overthedoors.it
*.thumbors.overthedoors.it
*.autodiscover.polskatelewizja.online
*.cpanel.polskatelewizja.online
*.cpcalendars.polskatelewizja.online
*.cpcontacts.polskatelewizja.online
*.demo.polskatelewizja.online
*.mail.polskatelewizja.online
polskatelewizja.online
*.polskatelewizja.online
*.portal.polskatelewizja.online
*.webdisk.polskatelewizja.online
*.webmail.polskatelewizja.online
posterce.com
*.posterce.com
thecheftable.com
*.thecheftable.com
thereptileking.com
*.thereptileking.com
toothfairy.it
*.toothfairy.it
*.webmail.toothfairy.it
Other domains in certificate