Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=nznewslive.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 04, 2026
Valid Until
September 02, 2026 68 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2F:91:72:11:7A:AA:6F:B0:58:DD:90:8A:38:8D:7A:91:F4:FA:67:97:58:30:6E:23:F7:43:42:39:70:94:ED:4F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
vvho.com *.vvho.com *.accounts.vvho.com *.adxcklabvirtual.vvho.com *.agwl.vvho.com *.anywhere.vvho.com *.bjb.vvho.com *.blog.vvho.com *.bnp.vvho.com *.bwd.vvho.com *.com.vvho.com *.dfzoslqtslqbova.vvho.com *.dga.vvho.com *.dny.vvho.com *.ebvpn.vvho.com *.f.vvho.com *.fdchvy.vvho.com *.firewall.vvho.com *.fxgd.vvho.com *.h.vvho.com *.hqm.vvho.com *.hrye.vvho.com *.imap.vvho.com *.infjm.vvho.com *.intelligence.vvho.com *.intra.vvho.com *.iso6mo.vvho.com *.ja.vvho.com *.jdpop.vvho.com *.jl.vvho.com *.krew.vvho.com *.kurpl.vvho.com *.microapi.vvho.com *.new.vvho.com *.outlook.vvho.com *.portal.vvho.com *.probiller.vvho.com *.prune.vvho.com *.ptun.vvho.com *.qdxp.vvho.com *.qeyjkrsnlbulh.vvho.com *.remoto.vvho.com *.shop.vvho.com *.sitemap.vvho.com *.sitemaps.vvho.com *.sslvpn.vvho.com *.store.vvho.com *.terminal.vvho.com *.tyouolnvb.vvho.com *.uexd.vvho.com *.virtualstudent.vvho.com *.vpngate.vvho.com *.vpnssl.vvho.com *.webdisk.vvho.com *.workflow.vvho.com *.www.vvho.com *.xc.vvho.com *.xoj.vvho.com *.xqjum.vvho.com *.zvxde.vvho.com

Other domains in certificate

nznewslive.com *.nznewslive.com
*.154.soulpoetsworkshop.com soulpoetsworkshop.com *.soulpoetsworkshop.com
*.1kn96f.thesustainableliving.com *.admin.thesustainableliving.com *.api.thesustainableliving.com *.app.thesustainableliving.com *.assets.thesustainableliving.com *.brave.thesustainableliving.com *.comet.thesustainableliving.com *.csurmwildcard.thesustainableliving.com *.demo.thesustainableliving.com *.hostmaster.thesustainableliving.com *.ildcard.thesustainableliving.com *.jcngucsurmwildcard.thesustainableliving.com *.m.thesustainableliving.com *.portal.thesustainableliving.com *.remote.thesustainableliving.com *.remoto.thesustainableliving.com *.test.thesustainableliving.com thesustainableliving.com *.thesustainableliving.com *.vpn.thesustainableliving.com *.wildcard.thesustainableliving.com *.www.thesustainableliving.com *.wwww.thesustainableliving.com *.y4ci1n.thesustainableliving.com