Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=roslund.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 26, 2026
Valid Until
December 25, 2026
65 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
54:2D:7B:D4:D4:6C:9D:5D:7B:F6:D0:2B:D6:61:8F:3C:FD:E8:33:4D:AC:A2:F9:BC:25:EC:5F:75:00:0B:6E:9E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
86 domains
compensationlawyer.com.au
*.compensationlawyer.com.au
*.argo.compensationlawyer.com.au
*.dashboard.compensationlawyer.com.au
*.insight.compensationlawyer.com.au
*.mail.compensationlawyer.com.au
*.mx2.compensationlawyer.com.au
*.prod.compensationlawyer.com.au
*.workflow.compensationlawyer.com.au
*.ww25.compensationlawyer.com.au
adelaidejob.com.au
*.adelaidejob.com.au
*.forum.adelaidejob.com.au
*.m.adelaidejob.com.au
*.preview.adelaidejob.com.au
*.random.adelaidejob.com.au
churchnews.info
*.churchnews.info
*.mp.churchnews.info
*.newsub.churchnews.info
*.ophandbook.churchnews.info
*.test.churchnews.info
*.treasure.churchnews.info
*.autodiscover.cmsmedia.au
cmsmedia.au
*.cmsmedia.au
*.cpanel.cmsmedia.au
*.cpcalendars.cmsmedia.au
*.cpcontacts.cmsmedia.au
*.mail.cmsmedia.au
collision.com.au
*.collision.com.au
*.mail.collision.com.au
*.5453adf8-ef2a-4895-bb7c-82333c2c6b4c.coly.com.au
coly.com.au
*.coly.com.au
*.e4042e01-2c12-4b88-9d77-48dfdb43bd97.coly.com.au
*.m.coly.com.au
*.mail.coly.com.au
*.www.coly.com.au
commercialrefrigeration.com.au
*.commercialrefrigeration.com.au
*.mail.commercialrefrigeration.com.au
*.autodiscover.companyloan.com.au
companyloan.com.au
*.companyloan.com.au
*.cpanel.companyloan.com.au
*.cpcalendars.companyloan.com.au
*.cpcontacts.companyloan.com.au
*.mail.companyloan.com.au
*.ww16.companyloan.com.au
competitionclub.com.au
*.competitionclub.com.au
*.mail.competitionclub.com.au
*.random.competitionclub.com.au
*.admin.grillbar.it
*.analytics.grillbar.it
*.app.grillbar.it
*.data.grillbar.it
*.demo.grillbar.it
*.dev.grillbar.it
*.flowise.grillbar.it
grillbar.it
*.grillbar.it
*.prod.grillbar.it
*.research.grillbar.it
*.superset.grillbar.it
leadershipkorea.com
*.leadershipkorea.com
*.mail.leadershipkorea.com
*.dev.momwow.mom
momwow.mom
*.momwow.mom
*.analytic.pharm.bio
*.backup.pharm.bio
pharm.bio
*.pharm.bio
roslund.com
*.roslund.com
*.xn--bjrn-6qa.roslund.com
*.api.sandraserrano.com
*.assets.sandraserrano.com
*.remoteapp.sandraserrano.com
sandraserrano.com
*.sandraserrano.com
*.wildcard.sandraserrano.com
Other domains in certificate