Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=yinflow.love
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
May 30, 2026
Valid Until
August 28, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5D:EA:E3:73:AA:A0:AC:0E:FD:96:D6:CE:B6:E6:BA:0C:0F:97:ED:FA:51:B5:CE:07:79:9E:45:55:59:81:03:AC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
ukcontractors.net *.ukcontractors.net *.dc-c45bfce91594.ukcontractors.net *.huser.ukcontractors.net *.m.ukcontractors.net

Other domains in certificate

*.4yj7f.badak69masuk.cfd *.60t9v.badak69masuk.cfd *.6cd9j.badak69masuk.cfd *.aowpq.badak69masuk.cfd *.assets.badak69masuk.cfd *.auth.badak69masuk.cfd *.backoffice.badak69masuk.cfd badak69masuk.cfd *.badak69masuk.cfd *.client.badak69masuk.cfd *.demo.badak69masuk.cfd *.dev.badak69masuk.cfd *.l7nqb.badak69masuk.cfd *.me7q1.badak69masuk.cfd *.n2pro.badak69masuk.cfd *.osldc.badak69masuk.cfd *.qdiek.badak69masuk.cfd *.ques8.badak69masuk.cfd *.rczhl.badak69masuk.cfd *.tcwfw60t9v.badak69masuk.cfd *.ttq3ls.badak69masuk.cfd *.uqlmaques8.badak69masuk.cfd *.uw9i.badak69masuk.cfd
baddy.ca *.baddy.ca *.hostmaster.baddy.ca *.m.baddy.ca *.www.baddy.ca
*.admin.dubaidatacenter.io *.api.dubaidatacenter.io *.dashboard.dubaidatacenter.io *.dev.dubaidatacenter.io dubaidatacenter.io *.dubaidatacenter.io *.test.dubaidatacenter.io *.user.dubaidatacenter.io
*.500-m-til-bryggen-i-skjermet-uteplass.hotelsinbergen.net *.allmenningen-apartments.hotelsinbergen.net *.apt-central-spacious.hotelsinbergen.net *.apt-central-with-2-bedrooms.hotelsinbergen.net *.apt-lake-view-in-center-of-3-bedrooms.hotelsinbergen.net *.barfot-apartments.hotelsinbergen.net *.bergen-city-apartments.hotelsinbergen.net *.bryggen-apartments.hotelsinbergen.net *.budgetel-kong-oscarsgate-44.hotelsinbergen.net *.byliv-i-stilfull-4-soveroms.hotelsinbergen.net *.central-city-apartments.hotelsinbergen.net *.corner-apartments.hotelsinbergen.net *.dinbnb-apartments-3-bedrooms.hotelsinbergen.net *.dragesmauet-apartments.hotelsinbergen.net *.engen-apartments.hotelsinbergen.net *.floyen-apartment.hotelsinbergen.net *.homestay-gyldenpris.hotelsinbergen.net hotelsinbergen.net *.hotelsinbergen.net *.mainous-studio-apartments.hotelsinbergen.net *.nostegaten-seaside-apartments.hotelsinbergen.net *.room-between-the-7-mountains.hotelsinbergen.net *.scandic-bergen-airport.hotelsinbergen.net *.scandic-neptun.hotelsinbergen.net *.skansen-apartments.hotelsinbergen.net *.spacious-renovated-4-bedrooms.hotelsinbergen.net
*.dev.meshcentral.app meshcentral.app *.meshcentral.app *.www.meshcentral.app
*.hao.xn--7wy856b.com xn--7wy856b.com *.xn--7wy856b.com
*.rds.xn--qlq361e.com *.rdweb.xn--qlq361e.com xn--qlq361e.com *.xn--qlq361e.com
*.new.yinflow.love *.test.yinflow.love yinflow.love *.yinflow.love
*.gsezxd.yshu8.info yshu8.info *.yshu8.info
*.rds.zondot.com *.rdweb.zondot.com zondot.com *.zondot.com