Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=redheartphoto.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
59 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
B6:BD:6C:CB:6B:B4:E3:E6:5C:DF:5A:6B:6B:3C:66:7A:B0:73:C3:60:8E:8E:90:95:DA:57:D4:BB:EF:F6:02:C2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
lxg.net.au
*.lxg.net.au
*.ww16.lxg.net.au
abstinenceworks.org
*.abstinenceworks.org
aisatravel.com
*.aisatravel.com
akunproitalia.biz
*.akunproitalia.biz
*.sitemap.akunproitalia.biz
*.www.akunproitalia.biz
algosys.co
*.algosys.co
anserc.org
*.anserc.org
apicarros.com
*.apicarros.com
*.ww17.apicarros.com
*.ww38.apicarros.com
businessformedicareforall.org
*.businessformedicareforall.org
*.ww38.businessformedicareforall.org
d12wouv0v3odi87llf53.com
*.d12wouv0v3odi87llf53.com
dealbusters.com.au
*.dealbusters.com.au
*.ww17.dealbusters.com.au
*.ww25.dealbusters.com.au
driveguard.pro
*.driveguard.pro
dylandays.org
*.dylandays.org
*.ww38.dylandays.org
ecomlife.pro
*.ecomlife.pro
*.ru.ecomlife.pro
gigi-spo.de
*.gigi-spo.de
gonzlaezmexicanrestaurant.com
*.gonzlaezmexicanrestaurant.com
*.bhk.hawk.cool
hawk.cool
*.hawk.cool
*.mining.hawk.cool
*.sandbox.hawk.cool
hcchien.org
*.hcchien.org
*.ww25.hcchien.org
*.learnmode-online.learnmode.co.uk
learnmode.co.uk
*.learnmode.co.uk
meatspin.site
*.meatspin.site
*.stg.meatspin.site
*.ww38.meatspin.site
movie123free.com
*.movie123free.com
nolafemmes.com
*.nolafemmes.com
*.ww16.nolafemmes.com
perigee.at
*.perigee.at
qualitynumberplates.com
*.qualitynumberplates.com
qyrang.store
*.qyrang.store
redheartphoto.com
*.redheartphoto.com
regalorlandotransportation.com
*.regalorlandotransportation.com
rlbxhelper.co
*.rlbxhelper.co
*.random.sigari.eu
sigari.eu
*.sigari.eu
*.ww16.sigari.eu
*.ww25.sigari.eu
sumtraw.com
*.sumtraw.com
*.pay.thewilloughbycompound.com
thewilloughbycompound.com
*.thewilloughbycompound.com
uzparno.com
*.uzparno.com
*.random.ydk.au
*.th.ydk.au
*.ua.ydk.au
ydk.au
*.ydk.au
Other domains in certificate