Open
Cached
·
just now
79/100
SECURITY SCORE
Certificate Information
Subject
CN=thesoundset.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:1C:94:6F:8C:53:58:35:B3:11:C3:0F:3F:21:D6:46:09:A6:84:62:3B:21:93:17:E0:22:02:E0:E3:1B:0A:5C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
translateintelligence.com
*.translateintelligence.com
thehague.rent
*.thehague.rent
*.traefik.thehague.rent
thesoundset.com
*.thesoundset.com
thetourists.it
*.thetourists.it
theupgrade.it
*.theupgrade.it
threeind.shop
*.threeind.shop
timberlanonlien.shop
*.timberlanonlien.shop
tinder.at
*.tinder.at
tktg886.cyou
*.tktg886.cyou
toparticlesdiscover.com
*.toparticlesdiscover.com
torrentportal.it
*.torrentportal.it
totalcpap.com
*.totalcpap.com
tp6c.vip
*.tp6c.vip
traderbot.io
*.traderbot.io
trading-kenya.com
*.trading-kenya.com
tradingagent.co
*.tradingagent.co
tradingcardspace.com
*.tradingcardspace.com
tradingcoach.pro
*.tradingcoach.pro
trafficenforcementbureau.us
*.trafficenforcementbureau.us
tragamonedas.info
*.tragamonedas.info
tragaperra.org
*.tragaperra.org
tragic.one
*.tragic.one
traidmod.co
*.traidmod.co
trailbliss.online
*.trailbliss.online
trainbb.com
*.trainbb.com
trattoriabordino.it
*.trattoriabordino.it
traveladventurousspirit.live
*.traveladventurousspirit.live
travelbucketcoach.xyz
*.travelbucketcoach.xyz
trulyuncommon.com
*.trulyuncommon.com
trydemo-okeplay777.xyz
*.trydemo-okeplay777.xyz
tryinsign.com
*.tryinsign.com
tryrevenueherolabs.com
*.tryrevenueherolabs.com
tumbleweed.it
*.tumbleweed.it
tummy-tuck-ww.click
*.tummy-tuck-ww.click
tupuy.com
*.tupuy.com
turk7.org
*.turk7.org
twininternal.org
*.twininternal.org
twitmate.com
*.twitmate.com
twslive.help
*.twslive.help
ubm.it
*.ubm.it
ufabettime899.club
*.ufabettime899.club
ufak24.club
*.ufak24.club
ug8angpao.com
*.ug8angpao.com
um7htociuy3d.com
*.um7htociuy3d.com
Other domains in certificate