75/100 SECURITY SCORE

Certificate Information

Subject
CN=viticulturist.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 03, 2026
Valid Until
January 01, 2027 61 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
74:D1:58:BF:B5:9B:6D:B1:59:C1:73:24:36:38:36:BD:03:A9:90:63:88:89:DF:CC:59:1F:01:E9:3F:34:9E:7E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
wwwc7011.com *.wwwc7011.com *.admin.wwwc7011.com *.api.wwwc7011.com *.assets.wwwc7011.com *.dev.wwwc7011.com *.sitemaps.wwwc7011.com *.test.wwwc7011.com

Other domains in certificate

bh-jj.cn *.bh-jj.cn *.ku.bh-jj.cn
clip.ltd *.clip.ltd *.staging.clip.ltd
cunsultazione.it *.cunsultazione.it *.remote.cunsultazione.it
danhbaidoithuong3.club *.danhbaidoithuong3.club *.demo.danhbaidoithuong3.club
electrocytegenerator.com *.electrocytegenerator.com *.sitemaps.electrocytegenerator.com
*.agentsamiul.feiaxa.com feiaxa.com *.feiaxa.com *.games.feiaxa.com
getcapitalboostinsight.co *.getcapitalboostinsight.co *.m.getcapitalboostinsight.co
*.edgecharter.innersheddesign.co.uk innersheddesign.co.uk *.innersheddesign.co.uk
623ef43b-ffae-470e-8fb2-6d34afde2356.lysterfield.com.au 75881c87-d857-4d63-b2bf-f1bd285eba0f.lysterfield.com.au 98b60e59-22a5-48b4-a500-1d0783204138.lysterfield.com.au af4d4c22-29b9-4fab-9f0d-6e5e2c814d0a.lysterfield.com.au api.lysterfield.com.au autodiscover.lysterfield.com.au c61bb210-cda1-455b-9862-72122335b481.lysterfield.com.au cpanel.lysterfield.com.au cpcontacts.lysterfield.com.au data.lysterfield.com.au dev.lysterfield.com.au eg.lysterfield.com.au ipevupop.lysterfield.com.au lysterfield.com.au mail.lysterfield.com.au mta-sts.lysterfield.com.au pop.lysterfield.com.au secure.lysterfield.com.au sitemap.lysterfield.com.au sitemaps.lysterfield.com.au test.lysterfield.com.au webdisk.lysterfield.com.au whm.lysterfield.com.au wildcard.lysterfield.com.au ww16.lysterfield.com.au ww25.lysterfield.com.au ww38.lysterfield.com.au www.lysterfield.com.au www2.lysterfield.com.au
netconnexions.co.uk *.netconnexions.co.uk *.staging.netconnexions.co.uk
pszajueonaol.info *.pszajueonaol.info *.sitemaps.pszajueonaol.info
suffusion.com *.suffusion.com *.ww2.suffusion.com *.ww91.suffusion.com
viticulturist.com *.viticulturist.com *.ww16.viticulturist.com
*.app.xtreamflix.xyz *.autoconfig.xtreamflix.xyz *.autodiscover.xtreamflix.xyz *.cpcontacts.xtreamflix.xyz *.d.xtreamflix.xyz *.dashboard.xtreamflix.xyz *.mail.xtreamflix.xyz *.sitemap.xtreamflix.xyz *.sitemaps.xtreamflix.xyz *.smtps.xtreamflix.xyz *.webdisk.xtreamflix.xyz *.ww25.xtreamflix.xyz xtreamflix.xyz *.xtreamflix.xyz