76/100 SECURITY SCORE

Certificate Information

Subject
CN=freeprojectsupport.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 21, 2026
Valid Until
August 19, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C5:71:4E:20:D9:E2:F7:97:37:F6:72:FB:5B:FA:AF:0A:9C:8E:29:F6:0C:6E:C6:99:0D:CC:5C:5F:D4:DA:C3:FA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
fopauctions.com *.fopauctions.com *.admin.fopauctions.com *.api.fopauctions.com *.app.fopauctions.com *.assets.fopauctions.com *.demo.fopauctions.com *.dev.fopauctions.com *.jeoota.fopauctions.com *.new.fopauctions.com *.testing.fopauctions.com *.vpn.fopauctions.com *.www.fopauctions.com

Other domains in certificate

33310.one *.33310.one *.api.33310.one *.app.33310.one *.beta.33310.one *.cdviishare.33310.one *.crm.33310.one *.external.33310.one *.hr.33310.one *.mail.33310.one *.my.33310.one *.public.33310.one *.sharepoint.33310.one *.www.33310.one
*.api.beyif.com beyif.com *.beyif.com
*.access.clinicadental.net *.autodiscover.clinicadental.net clinicadental.net *.clinicadental.net *.cpcalendars.clinicadental.net *.cpcontacts.clinicadental.net *.ftp.clinicadental.net *.rd.clinicadental.net *.rds.clinicadental.net *.rdweb.clinicadental.net *.remote.clinicadental.net *.term.clinicadental.net *.web.clinicadental.net
concaierge.com *.concaierge.com *.m.concaierge.com *.phpmyadmin.concaierge.com *.www.concaierge.com
*.2c8b5018-2eda-48d9-accc-c25c5a6974a9.freeprojectsupport.com *.api.freeprojectsupport.com freeprojectsupport.com *.freeprojectsupport.com *.members.freeprojectsupport.com *.test.freeprojectsupport.com *.vpn.freeprojectsupport.com
gdgmediamanagementco.com *.gdgmediamanagementco.com *.inst.gdgmediamanagementco.com
*.cpanel.genus.my *.cpcalendars.genus.my *.cpcontacts.genus.my genus.my *.genus.my *.m.genus.my *.mail.genus.my *.webdisk.genus.my *.webmail.genus.my *.whm.genus.my
*.cpcontacts.happyxoang.com happyxoang.com *.happyxoang.com *.stats.happyxoang.com
*.hostmaster.hyperspacenine.com hyperspacenine.com *.hyperspacenine.com *.jenkins.hyperspacenine.com *.staging.hyperspacenine.com *.www.hyperspacenine.com
*.gowww.shdfo.cn *.ldcard.shdfo.cn shdfo.cn *.shdfo.cn *.wwww.shdfo.cn
*.admin.virgilante.com *.app.virgilante.com *.backend.virgilante.com *.hostmaster.virgilante.com virgilante.com *.virgilante.com *.www.virgilante.com