Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=ujnited.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 24, 2026
Valid Until
July 23, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C8:38:D4:E2:5A:29:AA:EC:3A:1B:A6:AB:49:C2:A8:D9:B2:C4:21:FA:E8:8A:8E:13:F2:F4:7D:81:43:70:28:E9
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ujnited.com *.ujnited.com *.enews.ujnited.com *.hotels.ujnited.com *.jetstream.ujnited.com

Other domains in certificate

allencummings.com *.allencummings.com *.ww25.allencummings.com
debore.com *.debore.com *.hostmaster.debore.com
ditrectv.com *.ditrectv.com *.hostmaster.ditrectv.com *.members.ditrectv.com *.random.ditrectv.com
dot4less.com *.dot4less.com *.hostmaster.dot4less.com *.ns1.dot4less.com *.ns2.dot4less.com
dotbrown.com *.dotbrown.com *.hostmaster.dotbrown.com *.mail.dotbrown.com
freeporm.com *.freeporm.com *.iot.freeporm.com *.links.freeporm.com *.lista.freeporm.com *.m.freeporm.com *.n2.freeporm.com *.service.freeporm.com *.sms.freeporm.com *.social.freeporm.com *.webmail.freeporm.com *.wildcard.freeporm.com *.ww1.freeporm.com *.xnxx.freeporm.com
hnn.pl *.hnn.pl *.hostmaster.hnn.pl *.mail-lima.hnn.pl *.secure.hnn.pl *.ssl.hnn.pl *.staging1.hnn.pl *.www.hnn.pl
immoqelt.de *.immoqelt.de *.random.immoqelt.de *.tagesspiegel.immoqelt.de
irinagrevtsova.com *.irinagrevtsova.com *.ww38.irinagrevtsova.com
metruyenchu.pro *.metruyenchu.pro
minimaldesign.studio *.minimaldesign.studio
*.circinus.negligence.com negligence.com *.negligence.com
*.app.revwhois.net *.config.revwhois.net *.explore.revwhois.net *.index.revwhois.net *.internal.revwhois.net *.main.revwhois.net *.random.revwhois.net *.report.revwhois.net *.reports.revwhois.net revwhois.net *.revwhois.net *.server.revwhois.net *.stats.revwhois.net *.uat.revwhois.net *.vis.revwhois.net *.visualizations.revwhois.net *.ww38.revwhois.net
*.random.runningwatches.org runningwatches.org *.runningwatches.org *.ww38.runningwatches.org
saajanhalal.co.uk *.saajanhalal.co.uk *.ww25.saajanhalal.co.uk
*.fwd.tindergay.com *.idp1.tindergay.com tindergay.com *.tindergay.com *.ww38.tindergay.com