SSL Certificate Analysis for test3d.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=listenmaxway.icu

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

April 09, 2026

Valid Until

July 08, 2026 57 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

E8:1E:2C:94:CB:1A:E1:21:EB:19:21:3A:B0:77:22:FC:2D:05:69:4D:9A:BB:3B:DE:49:8E:EF:01:A3:9A:68:50

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

test3d.com *.test3d.com *.mx.test3d.com

Other domains in certificate

*.04740be0-9fca-4154-b24b-547821b3a53b.08510.loan 08510.loan *.08510.loan *.ac1a9cd3-c706-45af-b394-743348df6279.08510.loan *.acquia.08510.loan *.api.08510.loan *.app.08510.loan *.asa.08510.loan *.assets.08510.loan *.chef.08510.loan *.dd17a472-e678-4d25-b932-14d07be7f82a.08510.loan *.dev.08510.loan *.docs.08510.loan *.element.08510.loan *.external.08510.loan *.fauna.08510.loan *.gitlab.08510.loan *.hr.08510.loan *.logstash.08510.loan *.members.08510.loan *.my.08510.loan *.new.08510.loan *.portal.08510.loan *.progress.08510.loan *.resume.08510.loan *.s1.08510.loan *.staging.08510.loan *.stape.08510.loan *.test.08510.loan *.www.08510.loan

777-bote777.co *.777-bote777.co *.7f874dd6-1f45-45f8-8938-31e2d42d2610.777-bote777.co *.a345548a-79d8-4a9b-9315-2f7cd98a8beb.777-bote777.co *.b4fc6ba4-bf22-4ac4-9fc0-1801cfcc812b.777-bote777.co *.blog.777-bote777.co *.hostmaster.777-bote777.co

alphaville.live *.alphaville.live *.investor.alphaville.live

baphometplush.store *.baphometplush.store *.ww25.baphometplush.store

*.ftp.gotinno.com gotinno.com *.gotinno.com *.www.gotinno.com

*.accounting.listenmaxway.icu *.alemtat.listenmaxway.icu *.ameriabank.listenmaxway.icu *.billing.listenmaxway.icu *.cbk.listenmaxway.icu *.inecobank.listenmaxway.icu listenmaxway.icu *.listenmaxway.icu *.shipex.listenmaxway.icu *.telcell.listenmaxway.icu *.westernunions-az.listenmaxway.icu

*.7161a99b-aa84-4ff8-829c-e2cd76b28e8f.sspcyberclub.com *.admin.sspcyberclub.com *.cdn.sspcyberclub.com *.dev.sspcyberclub.com sspcyberclub.com *.sspcyberclub.com *.zhucawww2.sspcyberclub.com