76/100 SECURITY SCORE

Certificate Information

Subject
CN=wordsworth-edition.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:6D:64:44:59:36:08:01:59:83:59:A2:E6:FB:8E:1D:EA:43:63:41:0A:8E:BD:55:D2:35:83:01:3E:9D:4E:24
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

74 domains
singercenter.com *.singercenter.com *.admin.singercenter.com *.api.singercenter.com *.app.singercenter.com *.apps.singercenter.com *.assets.singercenter.com *.backup.singercenter.com *.blog.singercenter.com *.dashboard.singercenter.com *.dev.singercenter.com *.fkpxtqzuyvformation.singercenter.com *.formation.singercenter.com *.gate.singercenter.com *.gateway.singercenter.com *.gp.singercenter.com *.hostmaster.singercenter.com *.m.singercenter.com *.mail.singercenter.com *.mailer.singercenter.com *.marketing.singercenter.com *.members.singercenter.com *.portal.singercenter.com *.ra.singercenter.com *.rd.singercenter.com *.rdp.singercenter.com *.rds.singercenter.com *.rdweb.singercenter.com *.remoteapp.singercenter.com *.remoto.singercenter.com *.rustore.singercenter.com *.secure.singercenter.com *.shop.singercenter.com *.sitemaps.singercenter.com *.ssl.singercenter.com *.staging.singercenter.com *.stg.singercenter.com *.test.singercenter.com *.ts.singercenter.com *.uhzufrd.singercenter.com *.v1.singercenter.com *.v2.singercenter.com *.vpn1.singercenter.com *.vpn2.singercenter.com *.vpnssl.singercenter.com *.web.singercenter.com *.webvpn.singercenter.com *.ww1.singercenter.com *.ww25.singercenter.com *.ww38.singercenter.com *.wzlinqa.singercenter.com

Other domains in certificate

corazonalegre.com *.corazonalegre.com *.m.corazonalegre.com *.ww1.corazonalegre.com *.ww16.corazonalegre.com
*.firewall.gilcrease.com gilcrease.com *.gilcrease.com *.hostmaster.gilcrease.com *.m.gilcrease.com *.mx1.gilcrease.com *.sitemap.gilcrease.com *.webmail.gilcrease.com *.ww1.gilcrease.com *.ww11.gilcrease.com
vv6232.com *.vv6232.com
*.m.wordsworth-edition.com *.mail1.wordsworth-edition.com wordsworth-edition.com *.wordsworth-edition.com *.ww12.wordsworth-edition.com *.www.wordsworth-edition.com