SSL Certificate Analysis for thisis.net - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=dicas.games

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

February 13, 2026

Valid Until

May 14, 2026 84 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

32:8C:79:BD:3B:D3:C9:4B:53:4C:1A:8B:0C:84:67:BE:5E:C2:7D:B1:78:3E:D4:28:5F:20:2C:C2:BF:E0:59:54

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

thisis.net *.thisis.net *.ww16.thisis.net

Other domains in certificate

appliances.rent *.appliances.rent *.sitemap.appliances.rent *.www.appliances.rent

authentics.us *.authentics.us *.hostmaster.authentics.us *.www.authentics.us

bpsupercharger.com *.bpsupercharger.com *.www.bpsupercharger.com

cafesoylentgreen.com *.cafesoylentgreen.com *.www.cafesoylentgreen.com

debtsolutions.it *.debtsolutions.it *.wwww.debtsolutions.it

*.access.dicas.games *.api.dicas.games dicas.games *.dicas.games

*.access.doseido.com doseido.com *.doseido.com *.sitemaps.doseido.com *.ssl.doseido.com

*.dc-07c09753cca7.podiumcoin.com *.mail.podiumcoin.com podiumcoin.com *.podiumcoin.com *.wildcard.podiumcoin.com *.www.podiumcoin.com

*.admin.proprio-mag.net *.backend.proprio-mag.net *.hostmaster.proprio-mag.net proprio-mag.net *.proprio-mag.net *.www.proprio-mag.net

scanerqr.org *.scanerqr.org *.ww2.scanerqr.org *.ww7.scanerqr.org *.www.scanerqr.org

*.3ef6b341-ab65-4a2c-af4b-9218beb87c53.sgptoto49.xyz *.backup.sgptoto49.xyz *.mail.sgptoto49.xyz *.marketing.sgptoto49.xyz *.qa.sgptoto49.xyz sgptoto49.xyz *.sgptoto49.xyz *.uat.sgptoto49.xyz *.v1.sgptoto49.xyz *.v2.sgptoto49.xyz *.ww25.sgptoto49.xyz *.ww38.sgptoto49.xyz

*.biz.spairroom.com spairroom.com *.spairroom.com

*.ns2.unhasprotreinamentos.com.br *.ns3.unhasprotreinamentos.com.br unhasprotreinamentos.com.br *.unhasprotreinamentos.com.br

*.ns2.uniter.com.br *.ns3.uniter.com.br uniter.com.br *.uniter.com.br

xhytgdvb98.online *.xhytgdvb98.online