Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=2112ks.club
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 01, 2026
Valid Until
June 30, 2026 39 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1B:D8:07:14:9D:E8:DE:95:3C:95:26:D9:35:AA:BD:FF:3E:F4:A8:B2:A2:CD:6D:97:2C:D5:E8:64:7C:F5:A9:32
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
tokodigido.com *.tokodigido.com

Other domains in certificate

123movies9free.com *.123movies9free.com
17507.locker *.17507.locker
2112ks.club *.2112ks.club *.q2.2112ks.club *.superset.2112ks.club *.uat.2112ks.club
269ux.cc *.269ux.cc
43859.locker *.43859.locker
8m1795.xyz *.8m1795.xyz
93138.app *.93138.app
a180yjj.top *.a180yjj.top
aa-replica.com *.aa-replica.com
adepttechhub.com *.adepttechhub.com
aflontechs.com *.aflontechs.com
ahavatattoo.com *.ahavatattoo.com
aircraft-tugs.com *.aircraft-tugs.com
anabolicshopsteroid.com *.anabolicshopsteroid.com
antalyamasozbayanlar.com *.antalyamasozbayanlar.com
automated-robots-683363785.click *.automated-robots-683363785.click
balancedinbeing.com *.balancedinbeing.com
baltimorecitypublicschools.org *.baltimorecitypublicschools.org *.ww25.baltimorecitypublicschools.org
dinkiesden.com *.dinkiesden.com *.ww25.dinkiesden.com
fazendainc.com *.fazendainc.com *.nfe.fazendainc.com *.smtp.fazendainc.com *.tracking.fazendainc.com
guriri.co *.guriri.co
hoki138slot.xyz *.hoki138slot.xyz *.ww25.hoki138slot.xyz
hokipay.org *.hokipay.org *.ww25.hokipay.org
isleofcapri.au *.isleofcapri.au
*.app.kentukystatepolice.org kentukystatepolice.org *.kentukystatepolice.org *.www.kentukystatepolice.org
lotuspay.xyz *.lotuspay.xyz *.service.lotuspay.xyz
nekototo4djp.site *.nekototo4djp.site *.www.nekototo4djp.site
nohohome.co.uk *.nohohome.co.uk *.www.nohohome.co.uk
raasta.live *.raasta.live *.ww25.raasta.live
richsingles.au *.richsingles.au
*.hotfix.seedlingcenter.asia seedlingcenter.asia *.seedlingcenter.asia
toilet-renovation-636495988.click *.toilet-renovation-636495988.click
*.api.visitata.com *.notexistsowa.visitata.com visitata.com *.visitata.com
*.demo.wykengrangefencingltd.co.uk wykengrangefencingltd.co.uk *.wykengrangefencingltd.co.uk