Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=tired.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 29, 2026
Valid Until
December 28, 2026
55 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8C:04:DE:A8:94:4B:F8:D5:DE:8E:2D:EE:AC:7C:79:32:8C:03:54:3C:32:43:5A:EB:7F:59:65:E7:62:67:3E:BE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
tired.com.au
*.tired.com.au
*.hostmaster.tired.com.au
*.mail.tired.com.au
*.postfix.tired.com.au
*.ww16.tired.com.au
*.ww17.tired.com.au
*.www.tired.com.au
thaishop.au
*.thaishop.au
*.ww17.thaishop.au
thatdomainname.com.au
*.thatdomainname.com.au
*.ww17.thatdomainname.com.au
*.www.thatdomainname.com.au
*.analytic.thebackroom.com.au
*.dash.thebackroom.com.au
*.gitlab.thebackroom.com.au
thebackroom.com.au
*.thebackroom.com.au
*.ww17.thebackroom.com.au
thecompoundchemist.com.au
*.thecompoundchemist.com.au
*.ww17.thecompoundchemist.com.au
thedailyassorted.com.au
*.thedailyassorted.com.au
*.wildcard.thedailyassorted.com.au
*.ww17.thedailyassorted.com.au
thedoctor.au
*.thedoctor.au
*.ww17.thedoctor.au
*.anmhmrandom.thegentry.com.au
*.mail.thegentry.com.au
*.mx0.thegentry.com.au
*.mx1.thegentry.com.au
*.random.thegentry.com.au
thegentry.com.au
*.thegentry.com.au
*.ww16.thegentry.com.au
*.ww17.thegentry.com.au
*.ww25.thegentry.com.au
*.ww38.thegentry.com.au
thegoat.au
*.thegoat.au
*.wildcard.thegoat.au
*.ww17.thegoat.au
*.ww38.thegoat.au
thegreatrace.ai
*.thegreatrace.ai
*.ww17.thegreatrace.ai
*.cpanel.thekimberley.com.au
*.cpcalendars.thekimberley.com.au
*.cpcontacts.thekimberley.com.au
*.hostmaster.thekimberley.com.au
*.mail.thekimberley.com.au
*.random.thekimberley.com.au
thekimberley.com.au
*.thekimberley.com.au
*.webdisk.thekimberley.com.au
*.webmail.thekimberley.com.au
*.ww16.thekimberley.com.au
*.ww17.thekimberley.com.au
*.www.thekimberley.com.au
*.send.themerchantgroup.com.au
*.signatures.themerchantgroup.com.au
themerchantgroup.com.au
*.themerchantgroup.com.au
*.ww17.themerchantgroup.com.au
*.ww38.themerchantgroup.com.au
thereadyroom.com.au
*.thereadyroom.com.au
*.ww17.thereadyroom.com.au
thinkskin.com.au
*.thinkskin.com.au
*.wildcard.thinkskin.com.au
*.ww16.thinkskin.com.au
*.ww17.thinkskin.com.au
*.test.thuisafgehaald.be
thuisafgehaald.be
*.thuisafgehaald.be
*.ww17.thuisafgehaald.be
*.www.thuisafgehaald.be
ticketcoin.au
*.ticketcoin.au
*.ww17.ticketcoin.au
*.ww38.ticketcoin.au
timetoact.com.au
*.timetoact.com.au
*.ww17.timetoact.com.au
Other domains in certificate