Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=clubyouth-u15-kanto.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 12, 2026
Valid Until
April 12, 2026
44 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D3:A2:52:D9:B5:C4:78:EA:A0:82:77:EB:27:A1:58:0C:50:11:4B:14:0C:88:57:63:75:48:6A:F2:C0:85:D7:34
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
scheeks.com
*.scheeks.com
architekten.mobi
*.architekten.mobi
*.random.architekten.mobi
*.ww25.architekten.mobi
asj-basket37.org
*.asj-basket37.org
caribeconex.com
*.caribeconex.com
casinofrank-online.com
*.casinofrank-online.com
cb01.salon
*.cb01.salon
cbc.ventures
*.cbc.ventures
cfilm.info
*.cfilm.info
cheapwineandpoetry.com
*.cheapwineandpoetry.com
cheatshouse.com
*.cheatshouse.com
clashroyale.world
*.clashroyale.world
clubyouth-u15-kanto.com
*.clubyouth-u15-kanto.com
cuevana-3.kim
*.cuevana-3.kim
devilsdiner.restaurant
*.devilsdiner.restaurant
digimovie.plus
*.digimovie.plus
digitalmarketingdegree.today
*.digitalmarketingdegree.today
dnt-inc.com
*.dnt-inc.com
dogsster.com
*.dogsster.com
doosanpowermoves.com
*.doosanpowermoves.com
fiverr.blog
*.fiverr.blog
*.b17.gparayo.info
*.c17.gparayo.info
*.e17.gparayo.info
gparayo.info
*.gparayo.info
*.random.gparayo.info
*.xn--t18b.gparayo.info
hants.us
*.hants.us
iforex.live
*.iforex.live
*.analytic.jutlandpark.com.au
*.ipv6.jutlandpark.com.au
jutlandpark.com.au
*.jutlandpark.com.au
*.mail.jutlandpark.com.au
*.staging.jutlandpark.com.au
kashmirscholarsnetwork.org
*.kashmirscholarsnetwork.org
katura-oroshi.com
*.katura-oroshi.com
knitting.au
*.knitting.au
kru.au
*.kru.au
*.s.kru.au
kuvhelp.live
*.kuvhelp.live
kzjeq.site
*.kzjeq.site
*.ww38.kzjeq.site
lordlynda.info
*.lordlynda.info
renovationloan.com.au
*.renovationloan.com.au
secj8.com
*.secj8.com
shack.au
*.shack.au
*.comwww.sm521.com
*.m.sm521.com
sm521.com
*.sm521.com
wastate.com
*.wastate.com
*.ww38.wastate.com
xso.com.au
*.xso.com.au
Other domains in certificate