75/100 SECURITY SCORE

Certificate Information

Subject
CN=vavadaf47.fun
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 08, 2026
Valid Until
January 06, 2027 80 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
AA:8F:5E:D0:A0:C1:10:54:D8:9D:28:3F:5F:4A:8B:C1:69:45:0C:DA:E1:4D:29:81:71:85:EF:EA:2D:26:DA:71
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
vavadaf47.fun *.vavadaf47.fun *.admin.vavadaf47.fun *.app.vavadaf47.fun *.blog.vavadaf47.fun *.dev.vavadaf47.fun *.internal.vavadaf47.fun *.prod.vavadaf47.fun *.staging.vavadaf47.fun *.test.vavadaf47.fun *.video.vavadaf47.fun *.xin.vavadaf47.fun

Other domains in certificate

*.accounts.crossdenominationalmission.org.uk *.admin.crossdenominationalmission.org.uk *.ai.crossdenominationalmission.org.uk *.api.crossdenominationalmission.org.uk *.api2.crossdenominationalmission.org.uk *.app.crossdenominationalmission.org.uk *.app2.crossdenominationalmission.org.uk *.apps.crossdenominationalmission.org.uk *.ar.crossdenominationalmission.org.uk *.auth.crossdenominationalmission.org.uk *.back.crossdenominationalmission.org.uk *.bhm.crossdenominationalmission.org.uk *.blog.crossdenominationalmission.org.uk *.blogs.crossdenominationalmission.org.uk *.cesia-api.crossdenominationalmission.org.uk *.cloud.crossdenominationalmission.org.uk *.common-api.crossdenominationalmission.org.uk *.corporate.crossdenominationalmission.org.uk crossdenominationalmission.org.uk *.crossdenominationalmission.org.uk *.crypto.crossdenominationalmission.org.uk *.dev-api.crossdenominationalmission.org.uk *.dev.crossdenominationalmission.org.uk *.email.crossdenominationalmission.org.uk *.exchange.crossdenominationalmission.org.uk *.feeds.crossdenominationalmission.org.uk *.field.crossdenominationalmission.org.uk *.finance.crossdenominationalmission.org.uk *.home.crossdenominationalmission.org.uk *.intranet.crossdenominationalmission.org.uk *.iot.crossdenominationalmission.org.uk *.mail1.crossdenominationalmission.org.uk *.mail2.crossdenominationalmission.org.uk *.mailers.crossdenominationalmission.org.uk *.med.crossdenominationalmission.org.uk *.mipzqwsl.crossdenominationalmission.org.uk *.mx.crossdenominationalmission.org.uk *.new.crossdenominationalmission.org.uk *.news.crossdenominationalmission.org.uk *.notexistsdev.crossdenominationalmission.org.uk *.notexistswebmaster.crossdenominationalmission.org.uk *.openapi.crossdenominationalmission.org.uk *.portal.crossdenominationalmission.org.uk *.qa-superset.crossdenominationalmission.org.uk *.rdweb.crossdenominationalmission.org.uk *.remote.crossdenominationalmission.org.uk *.report.crossdenominationalmission.org.uk *.reports.crossdenominationalmission.org.uk *.shop.crossdenominationalmission.org.uk *.staging.crossdenominationalmission.org.uk *.test.crossdenominationalmission.org.uk *.v1.crossdenominationalmission.org.uk *.vdi.crossdenominationalmission.org.uk *.wap.crossdenominationalmission.org.uk *.web.crossdenominationalmission.org.uk *.webmail.crossdenominationalmission.org.uk *.webmaster.crossdenominationalmission.org.uk *.ws.crossdenominationalmission.org.uk *.ww38.crossdenominationalmission.org.uk *.www.crossdenominationalmission.org.uk *.xcx.crossdenominationalmission.org.uk
*.admin.curvedream.uk *.backup.curvedream.uk curvedream.uk *.curvedream.uk *.ftp.curvedream.uk *.prod.curvedream.uk *.test.curvedream.uk *.uat.curvedream.uk *.v1.curvedream.uk *.wildcard.curvedream.uk *.www1.curvedream.uk
*.autodiscover.grooveaddict.org *.email.grooveaddict.org *.git.grooveaddict.org grooveaddict.org *.grooveaddict.org