Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=myaarpdeltadentalplan.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026
43 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
51:D4:C7:59:74:AC:72:08:84:E1:B5:7A:6B:26:5D:CB:D5:FD:40:85:73:2E:E5:2C:9C:2B:2A:79:EA:85:B0:1A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
timewarp.au
*.timewarp.au
accu-ckek.com
*.accu-ckek.com
*.ildcard.accu-ckek.com
*.latam.accu-ckek.com
alphahomeandgarden.com
*.alphahomeandgarden.com
*.random.alphahomeandgarden.com
*.ww38.alphahomeandgarden.com
appealspcn.co.uk
*.appealspcn.co.uk
arh.de
*.arh.de
*.ffffffffffff.arh.de
*.foto.arh.de
*.r.arh.de
*.ww38.arh.de
augirl.com.au
*.augirl.com.au
*.random.augirl.com.au
biligertelefon.de
*.biligertelefon.de
billigeer-telefonieren.de
*.billigeer-telefonieren.de
darria.com
*.darria.com
hardwaregrundlage.de
*.hardwaregrundlage.de
hempsteadegovpayments.com
*.hempsteadegovpayments.com
*.ww16.hempsteadegovpayments.com
huntingclub.com.au
*.huntingclub.com.au
i2i.au
*.i2i.au
jetcost.uk
*.jetcost.uk
*.kiki.jetcost.uk
jfr.au
*.jfr.au
*.random.jfr.au
krys.au
*.krys.au
*.ww38.krys.au
livebooty.com
*.livebooty.com
myaarpdeltadentalplan.com
*.myaarpdeltadentalplan.com
*.random.myaarpdeltadentalplan.com
openpics.ru
*.openpics.ru
paychexfle.com
*.paychexfle.com
*.random.paychexfle.com
penrod.au
*.penrod.au
*.random.penrod.au
phj.au
*.phj.au
pralinee.de
*.pralinee.de
primosten.de
*.primosten.de
traktorbatterien.de
*.traktorbatterien.de
*.random.tzn.eu
tzn.eu
*.tzn.eu
usikolwethu.co.za
*.usikolwethu.co.za
wad.au
*.wad.au
*.ww38.wad.au
wearhwr.com
*.wearhwr.com
*.hostmaster.wwwcarguru.com
*.random.wwwcarguru.com
wwwcarguru.com
*.wwwcarguru.com
xn--splmaschinenreiniger-qec.de
*.xn--splmaschinenreiniger-qec.de
*.ww38.yogi.au
yogi.au
*.yogi.au
*.ww38.zkt.de
zkt.de
*.zkt.de
Other domains in certificate