76/100 SECURITY SCORE

Certificate Information

Subject
CN=grindkit.tech
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 25, 2026
Valid Until
July 24, 2026 65 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
69:34:78:94:A1:72:9B:0B:EC:0C:84:0E:B4:D8:3B:D7:6F:33:A2:E4:A5:69:9D:D5:70:6E:3A:B1:52:8E:30:92
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
stakingrobot.com *.stakingrobot.com *.ww1.stakingrobot.com

Other domains in certificate

*.a.benjaminkarlmalia.recipes *.api.benjaminkarlmalia.recipes *.assets.benjaminkarlmalia.recipes *.auth.benjaminkarlmalia.recipes *.autodiscover.benjaminkarlmalia.recipes *.backoffice.benjaminkarlmalia.recipes benjaminkarlmalia.recipes *.benjaminkarlmalia.recipes *.blog.benjaminkarlmalia.recipes *.git.benjaminkarlmalia.recipes *.gitlab.benjaminkarlmalia.recipes *.host.benjaminkarlmalia.recipes *.hostmaster.benjaminkarlmalia.recipes *.iidlqauimpapi.benjaminkarlmalia.recipes *.pwgxhapi.benjaminkarlmalia.recipes *.root.benjaminkarlmalia.recipes *.smtp.benjaminkarlmalia.recipes *.wp.benjaminkarlmalia.recipes *.ww38.benjaminkarlmalia.recipes *.www.benjaminkarlmalia.recipes
extratorrent.one *.extratorrent.one *.media.extratorrent.one
*.69d943fa-bc65-4087-8629-750ebc16ca0b.grindkit.tech *.aging.grindkit.tech *.api.grindkit.tech *.backup.grindkit.tech *.dev.grindkit.tech grindkit.tech *.grindkit.tech *.staging.grindkit.tech *.uat.grindkit.tech *.w.grindkit.tech
*.ad.lasvegaschildsupport.com *.app.lasvegaschildsupport.com *.blog.lasvegaschildsupport.com *.cloud.lasvegaschildsupport.com *.demo.lasvegaschildsupport.com *.finance.lasvegaschildsupport.com *.hostmaster.lasvegaschildsupport.com lasvegaschildsupport.com *.lasvegaschildsupport.com *.rd.lasvegaschildsupport.com *.rds.lasvegaschildsupport.com *.sitemaps.lasvegaschildsupport.com *.wiki.lasvegaschildsupport.com *.www.lasvegaschildsupport.com
learning-ladders-nursery.co.uk *.learning-ladders-nursery.co.uk *.mail.learning-ladders-nursery.co.uk *.www.learning-ladders-nursery.co.uk
*.133014c6-9c91-40a9-b838-17a1f7631ec6.mijnmodem.nl *.home.mijnmodem.nl *.hwfnolime.mijnmodem.nl *.kpm.mijnmodem.nl *.kpn.mijnmodem.nl *.lime.mijnmodem.nl mijnmodem.nl *.mijnmodem.nl
*.dev.mldevservice.pro *.git.mldevservice.pro mldevservice.pro *.mldevservice.pro *.www.mldevservice.pro
monvalleybuildersllc.icu *.monvalleybuildersllc.icu
movie-thay.com *.movie-thay.com
*.cpcontacts.picsofsex.com picsofsex.com *.picsofsex.com *.smtp.picsofsex.com
*.ma.seta.me seta.me *.seta.me *.vose.seta.me *.wna.seta.me *.www.seta.me
*.edp.solace.com.au *.ffffffffffff.solace.com.au *.i.solace.com.au *.kjzx.solace.com.au *.mailserver.solace.com.au solace.com.au *.solace.com.au
thornesitedevelopment.icu *.thornesitedevelopment.icu