Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=comfortplusshoecenter.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 13, 2026
Valid Until
December 12, 2026
50 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
18:6A:A7:2A:21:5D:77:A2:A9:E4:98:78:42:78:6C:0D:95:FD:ED:6C:0C:62:7F:9B:AE:BB:AB:34:13:AF:D1:DD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
byryan.au
*.byryan.au
*.ww38.byryan.au
alertsdecks.com
*.alertsdecks.com
babywonderland.com.au
*.babywonderland.com.au
banquets.com.au
*.banquets.com.au
caa2010.org
*.caa2010.org
*.ns1.caa2010.org
chatmehatd.net
*.chatmehatd.net
*.ww25.chatmehatd.net
*.blog.comfortplusshoecenter.com
comfortplusshoecenter.com
*.comfortplusshoecenter.com
coolingfan.com.au
*.coolingfan.com.au
cqb.au
*.cqb.au
*.tjioze.cqb.au
*.ww38.cqb.au
cscu.com
*.cscu.com
*.my.cscu.com
*.sfwstbfj.cscu.com
debtagreement.com.au
*.debtagreement.com.au
demandes.com
*.demandes.com
*.www.demandes.com
dnatests.com.au
*.dnatests.com.au
*.ww25.dnatests.com.au
eurekatheatre.org
*.eurekatheatre.org
freedomforcelive.com
*.freedomforcelive.com
*.blog.freedomtaxusa.com
freedomtaxusa.com
*.freedomtaxusa.com
*.tech.freedomtaxusa.com
*.ww25.freedomtaxusa.com
*.ww38.freedomtaxusa.com
iamnaughty.co
*.iamnaughty.co
*.ww25.iamnaughty.co
*.ww38.iamnaughty.co
marktscheune.de
*.marktscheune.de
*.ww38.marktscheune.de
negociosyservicios.com
*.negociosyservicios.com
nymphomaniacs.au
*.nymphomaniacs.au
*.dns.pamphleteer.co.uk
pamphleteer.co.uk
*.pamphleteer.co.uk
pendred-syndrom.de
*.pendred-syndrom.de
*.admin.rhymebet.com
*.api.rhymebet.com
*.hostmaster.rhymebet.com
rhymebet.com
*.rhymebet.com
*.sitemap.rhymebet.com
*.sitemaps.rhymebet.com
*.vpn.rhymebet.com
*.www.rhymebet.com
*.securecs.shieffieldfinancial.com
shieffieldfinancial.com
*.shieffieldfinancial.com
sixsisterstuff.com
*.sixsisterstuff.com
*.wwe.sixsisterstuff.com
skouboe.com
*.skouboe.com
tiantain.com
*.tiantain.com
*.citrix.venetianflorida.com
*.random.venetianflorida.com
venetianflorida.com
*.venetianflorida.com
*.ww17.venetianflorida.com
*.random.ytp.au
*.ww25.ytp.au
ytp.au
*.ytp.au
Other domains in certificate