76/100 SECURITY SCORE

Certificate Information

Subject
CN=smspromote.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 16, 2026
Valid Until
July 15, 2026 60 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BE:5B:9B:AC:12:F0:77:B7:0F:F0:5C:A4:6C:3C:1B:84:64:70:B9:69:66:6F:1F:53:36:B2:CC:74:5B:9B:57:B1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
smspromote.com *.smspromote.com *.9a8b188d-a635-4281-a23d-b5dea34796d8.smspromote.com *.a.smspromote.com *.assets.smspromote.com *.dashboard.smspromote.com *.hostmaster.smspromote.com *.m.smspromote.com *.mailer.smspromote.com *.nhyojrdweb.smspromote.com *.qa.smspromote.com *.usaqlblog.smspromote.com *.uvnleusaqlblog.smspromote.com *.v2.smspromote.com *.vpn.smspromote.com *.web.smspromote.com *.wp.smspromote.com

Other domains in certificate

administration-statements.com *.administration-statements.com
ch-098.com *.ch-098.com *.www.ch-098.com
*.blog.comparethemarkey.com comparethemarkey.com *.comparethemarkey.com *.random.comparethemarkey.com *.ww25.comparethemarkey.com *.ww38.comparethemarkey.com
dies.au *.dies.au *.random.dies.au
discordapps.com *.discordapps.com *.hotfix.discordapps.com *.random.discordapps.com
*.boucb.elair.com elair.com *.elair.com *.ma-banquepopulaire.elair.com *.njn.elair.com *.thjn.elair.com *.ww25.elair.com
*.centrocirurgico.erastogaetner.com.br *.docsame.erastogaetner.com.br erastogaetner.com.br *.erastogaetner.com.br *.portal.erastogaetner.com.br *.portaldopaciente.erastogaetner.com.br *.portalpaciente.erastogaetner.com.br *.random.erastogaetner.com.br *.ww25.erastogaetner.com.br
fimland.us *.fimland.us *.ww38.fimland.us
freehouse.com.au *.freehouse.com.au *.mailserver.freehouse.com.au *.ww38.freehouse.com.au
*.2c0f2be9-8d2f-4a3f-9e49-05e96f7c2128.i420berlin.com *.98857279-1258-4cef-b0cc-51c89a5a3a45.i420berlin.com *.blog.i420berlin.com *.cloud.i420berlin.com i420berlin.com *.i420berlin.com *.office.i420berlin.com *.remote.i420berlin.com *.wp.i420berlin.com
irank.com.au *.irank.com.au *.ww38.irank.com.au
mappamondonuovo.org *.mappamondonuovo.org *.random.mappamondonuovo.org
talentselect.com.au *.talentselect.com.au *.ww38.talentselect.com.au
*.m.tendermoms.com tendermoms.com *.tendermoms.com *.ww38.tendermoms.com
*.mailx.themonkey.com themonkey.com *.themonkey.com *.ww25.themonkey.com *.xingxing.themonkey.com
*.ebay.xn--lpreis-vxa.com *.m.xn--lpreis-vxa.com *.www.xn--lpreis-vxa.com xn--lpreis-vxa.com *.xn--lpreis-vxa.com