Open
Cached
·
just now
91/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=hd2day.tv
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 01, 2026
Valid Until
April 01, 2026
34 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:44:57:9A:82:63:13:1F:66:93:EF:F3:5B:E3:28:47:6F:59:7E:7A:0F:D5:B1:6C:16:77:ED:59:F4:BF:80:4A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
accelerometer=(), browsing-topics=(), camera=(); +14 more
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
74 domains
wilsonfeed.com
*.wilsonfeed.com
*.crm.wilsonfeed.com
*.lime.wilsonfeed.com
10bitclub.me
*.10bitclub.me
*.pcxkkww38.10bitclub.me
*.whm.10bitclub.me
*.ww12.10bitclub.me
*.ww25.10bitclub.me
*.ww7.10bitclub.me
*.ww99.10bitclub.me
1822dierekt.de
*.1822dierekt.de
2null.cc
*.2null.cc
analisegrafologica.com
*.analisegrafologica.com
*.facebook.analisegrafologica.com
birthrecords.com.au
*.birthrecords.com.au
cftc.com.au
*.cftc.com.au
*.saveacowtoday.cftc.com.au
cpam-lille-douai-info.com
*.cpam-lille-douai-info.com
daewoo-electronics.es
*.daewoo-electronics.es
get-digging.co.uk
*.get-digging.co.uk
*.mail.get-digging.co.uk
hd2day.tv
*.hd2day.tv
heikin-ashi-charts.de
*.heikin-ashi-charts.de
*.hostmaster.heikin-ashi-charts.de
*.www.heikin-ashi-charts.de
*.blog.julielenzerkirk.com
*.dfs.julielenzerkirk.com
julielenzerkirk.com
*.julielenzerkirk.com
*.ww38.julielenzerkirk.com
kursuskahwinmelaka.com
*.kursuskahwinmelaka.com
*.ww25.kursuskahwinmelaka.com
manatoki313.net
*.manatoki313.net
meidmops.de
*.meidmops.de
mercatofoot.net
*.mercatofoot.net
pirateronline.com
*.pirateronline.com
*.ww16.pirateronline.com
playandlistentogifs.com
*.playandlistentogifs.com
plunksquieti.website
*.plunksquieti.website
*.mondial.relay-coli.com
relay-coli.com
*.relay-coli.com
rosesbikes.de
*.rosesbikes.de
schuhcentee.de
*.schuhcentee.de
speedwaycarsforsale.com
*.speedwaycarsforsale.com
*.nsd.vsanj.org
vsanj.org
*.vsanj.org
wienerasommerdeutschkurse.at
*.wienerasommerdeutschkurse.at
williamecarterschool.org
*.williamecarterschool.org
Other domains in certificate