76/100 SECURITY SCORE

Certificate Information

Subject
CN=mofa666.xyz
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 10, 2026
Valid Until
July 09, 2026 58 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C7:A8:E9:56:0C:49:E1:5F:55:14:29:B2:02:E1:79:47:21:D4:6F:59:2F:A6:A2:D4:28:BC:62:5B:42:11:89:13
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
tenscopebuild.com *.tenscopebuild.com *.42522a05-896c-4f2e-8738-a594e8f04f22.tenscopebuild.com *.app.tenscopebuild.com *.mail.tenscopebuild.com *.test.tenscopebuild.com

Other domains in certificate

agent-2-agent.net *.agent-2-agent.net *.gateway.agent-2-agent.net *.img.agent-2-agent.net *.portainer.agent-2-agent.net
*.0a2c44b5-fe2a-40de-a826-fc85c3b7c3bf.bazoline.ch *.283dafb1-a189-43ba-8f92-9a2de11c57ff.bazoline.ch *.5ccc0156-7f8e-4bce-99d5-ff86d0110ef0.bazoline.ch *.admin.bazoline.ch *.api.bazoline.ch *.app.bazoline.ch *.backup.bazoline.ch bazoline.ch *.bazoline.ch *.blog.bazoline.ch *.cd84b451-c9ee-4a12-855d-94547bd338b9.bazoline.ch *.cloud.bazoline.ch *.comune.bazoline.ch *.contact.bazoline.ch *.correo.bazoline.ch *.ctxcwpouvhshop.bazoline.ch *.dev.bazoline.ch *.epaper.bazoline.ch *.intranet.bazoline.ch *.members.bazoline.ch *.new.bazoline.ch *.portal.bazoline.ch *.pouvhshop.bazoline.ch *.profitieren.bazoline.ch *.qa.bazoline.ch *.rd.bazoline.ch *.rds.bazoline.ch *.rdweb.bazoline.ch *.remote.bazoline.ch *.shop-igr.bazoline.ch *.shop.bazoline.ch *.sitemap.bazoline.ch *.sitemaps.bazoline.ch *.stg.bazoline.ch *.store.bazoline.ch *.v2.bazoline.ch *.webmail.bazoline.ch *.ww.bazoline.ch *.www.bazoline.ch
*.autodiscover.educplay.com educplay.com *.educplay.com *.es.educplay.com *.game.educplay.com *.wildcard.educplay.com *.ww25.educplay.com
ghanaembassy-germany.com *.ghanaembassy-germany.com *.mail.ghanaembassy-germany.com *.ww25.ghanaembassy-germany.com *.ww38.ghanaembassy-germany.com
*.82d71e65-3d94-43b1-a2b2-30c451afb27a.klarna.live *.alpha.klarna.live *.comune.klarna.live *.g01.klarna.live *.hsm0stl297.klarna.live *.inst.klarna.live klarna.live *.klarna.live *.redditwithblackjackandhookers.klarna.live
*.cf01.mofa666.xyz mofa666.xyz *.mofa666.xyz *.sub.mofa666.xyz *.v1.mofa666.xyz *.v3.mofa666.xyz
*.admin.newsfor24pro.com newsfor24pro.com *.newsfor24pro.com
piermont-ny.org *.piermont-ny.org *.rlsbj.piermont-ny.org *.wap.piermont-ny.org *.ww17.piermont-ny.org
*.ek.szanpu.com *.nk.szanpu.com szanpu.com *.szanpu.com *.vk.szanpu.com