76/100 SECURITY SCORE

Certificate Information

Subject
CN=999982.fyi
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 05, 2026
Valid Until
May 06, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D5:61:CE:FD:98:DF:9D:56:01:1D:1E:0A:96:A0:25:B9:27:76:4A:B4:D1:1B:83:6E:1D:60:9D:D5:20:3C:93:BE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
fancytextgenerator.pro *.fancytextgenerator.pro

Other domains in certificate

999982.fyi *.999982.fyi
abstractartjourney.art *.abstractartjourney.art
acdpwbuo.xyz *.acdpwbuo.xyz
adscashz.xyz *.adscashz.xyz
adsttats.xyz *.adsttats.xyz
aeyfc.pro *.aeyfc.pro
afbhp.tv *.afbhp.tv
afcol.com *.afcol.com
againstthewind.org *.againstthewind.org
agameofunity.com *.agameofunity.com
agenticalgorithmic.com *.agenticalgorithmic.com
agvyo.com *.agvyo.com
*.api.euroticket.net euroticket.net *.euroticket.net
*.api.exhaley.com exhaley.com *.exhaley.com
exploratoryscience.org *.exploratoryscience.org
exploretraveltales.xyz *.exploretraveltales.xyz
ez-drivingschool.com *.ez-drivingschool.com
f1superfans.org *.f1superfans.org
f64571363.com *.f64571363.com
f6gpthkyvp.cc *.f6gpthkyvp.cc
fa88.gifts *.fa88.gifts
faithadvisor.com *.faithadvisor.com
family-resort.net *.family-resort.net
fantasynbawarriors.com *.fantasynbawarriors.com
faqqer.net *.faqqer.net
farsiyaar.com *.farsiyaar.com
farsoupcatering.llc *.farsoupcatering.llc
fascist.it *.fascist.it
fastergrow.xyz *.fastergrow.xyz
fastportalzz.xyz *.fastportalzz.xyz
fd52yhj.top *.fd52yhj.top
federationoffamilies.org *.federationoffamilies.org
fenceinstallation087396.icu *.fenceinstallation087396.icu
fertility-treatment-us-1.click *.fertility-treatment-us-1.click
fiche-entreprise.net *.fiche-entreprise.net
fineshubz.top *.fineshubz.top
fitnessactionvault.live *.fitnessactionvault.live
fitnesseverystep.live *.fitnesseverystep.live
fitnesslifeevolve.live *.fitnesslifeevolve.live
fitnessreachzone.live *.fitnessreachzone.live
fitnessstepfield.live *.fitnessstepfield.live
fitnessstrideworld.live *.fitnessstrideworld.live
fiveoclockfollies.blog *.fiveoclockfollies.blog