Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kaigaobg.com.cn
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 24, 2026
Valid Until
December 23, 2026
57 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
3F:25:A9:8A:AC:C2:D2:3E:E4:67:71:75:68:9A:24:BC:63:E1:4B:7D:D5:E8:8F:45:C7:83:55:D8:0B:4B:0D:40
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
chinagzlaser.com
*.chinagzlaser.com
1341.com
www.1341.com
2orbitsigmasystems.buzz
*.2orbitsigmasystems.buzz
2spherehyper.sbs
*.2spherehyper.sbs
45087.xyz
*.45087.xyz
52704.cc
*.52704.cc
5gwinbr1.com
*.5gwinbr1.com
913401.cc
*.913401.cc
98911.sbs
*.98911.sbs
analyticsnovazenith.sbs
*.analyticsnovazenith.sbs
apexprime.sbs
*.apexprime.sbs
arzum.market
*.arzum.market
aza777br1.com
*.aza777br1.com
cf65158.cc
*.cf65158.cc
china8488.com
*.china8488.com
chinaren1.com
*.chinaren1.com
corexnetwork.pics
*.corexnetwork.pics
enrolinschool.com
*.enrolinschool.com
evyasoftware.com
*.evyasoftware.com
fw88p.com
*.fw88p.com
groupvector.pics
*.groupvector.pics
hishourat.info
*.hishourat.info
hr-s-jsxkcua.cc
*.hr-s-jsxkcua.cc
kaigaobg.com.cn
*.kaigaobg.com.cn
keobongdaz.shop
*.keobongdaz.shop
lalru.com
*.lalru.com
lamtsuen.net
*.lamtsuen.net
langyu88.com
*.langyu88.com
listasiptv4k.xyz
*.listasiptv4k.xyz
orbitmaxnode.pics
*.orbitmaxnode.pics
ouscaxv.shop
*.ouscaxv.shop
panysoft.com
*.panysoft.com
papafamenyala.xyz
*.papafamenyala.xyz
pgkkkbr1.com
*.pgkkkbr1.com
plusaero24.pics
*.plusaero24.pics
pqbx.net
*.pqbx.net
primenano.sbs
*.primenano.sbs
prodynamics1vision.sbs
*.prodynamics1vision.sbs
quantumnetwork.sbs
*.quantumnetwork.sbs
scchinatown.com
*.scchinatown.com
solaxy-en.world
*.solaxy-en.world
straypawsanimalhaven.us
*.straypawsanimalhaven.us
systemsgoapex.sbs
*.systemsgoapex.sbs
therpsoft.com
*.therpsoft.com
zlzjq.me
*.zlzjq.me
Other domains in certificate