75/100 SECURITY SCORE

Certificate Information

Subject
CN=ekole.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 26, 2026
Valid Until
December 25, 2026 74 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
44:7B:73:5F:CA:24:F5:90:0A:74:13:44:FA:D4:EE:32:9B:FE:08:27:FE:C3:C9:5E:76:AF:C1:8A:AD:A9:C5:2C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
insurancesurvey.com.au *.insurancesurvey.com.au *.auth.insurancesurvey.com.au *.imap1.insurancesurvey.com.au *.mailserver.insurancesurvey.com.au *.poczta.insurancesurvey.com.au *.ww25.insurancesurvey.com.au *.ww38.insurancesurvey.com.au

Other domains in certificate

*.12.affiliate.com.au *.2023.affiliate.com.au *.2passwordsso.affiliate.com.au *.498avcirdmyx9hh8.affiliate.com.au *.a3255851-b0a0-584c-b03d-db5befe2e3fc.affiliate.com.au *.accelerate0.affiliate.com.au affiliate.com.au *.affiliate.com.au *.cacti.affiliate.com.au *.cal.affiliate.com.au *.cc.affiliate.com.au *.cslogonascustomer.affiliate.com.au *.dialoggroup.affiliate.com.au *.icemedia.affiliate.com.au *.imgs.affiliate.com.au *.mailserver.affiliate.com.au *.sender2-of-o53.affiliate.com.au *.ww25.affiliate.com.au *.ww38.affiliate.com.au
ekole.com *.ekole.com *.sandalias.ekole.com *.ww38.ekole.com
elrecord.com *.elrecord.com *.ww38.elrecord.com
*.img.immunizations.com.au immunizations.com.au *.immunizations.com.au *.ns0.immunizations.com.au
*.eng.influenced.com.au *.gw.influenced.com.au *.imap2.influenced.com.au influenced.com.au *.influenced.com.au *.random.influenced.com.au *.smkxxy.influenced.com.au *.vmspub.influenced.com.au *.ww25.influenced.com.au
*.imap1.kingbed.com.au kingbed.com.au *.kingbed.com.au *.ns0.kingbed.com.au *.test.kingbed.com.au *.ww25.kingbed.com.au
*.controlpanel.kuwaitsingles.com *.i81.kuwaitsingles.com kuwaitsingles.com *.kuwaitsingles.com *.mba.kuwaitsingles.com *.ns.kuwaitsingles.com *.store.kuwaitsingles.com *.support.kuwaitsingles.com *.wholesale.kuwaitsingles.com
*.demo.lipedemanetworkcanada.com lipedemanetworkcanada.com *.lipedemanetworkcanada.com *.sitemap.lipedemanetworkcanada.com *.webdisk.lipedemanetworkcanada.com
*.img.lxg.net.au lxg.net.au *.lxg.net.au *.ww16.lxg.net.au
*.a.mean.com.au *.golden.mean.com.au *.images.mean.com.au *.imap4.mean.com.au mean.com.au *.mean.com.au
*.cms.newboat.com.au *.d.newboat.com.au *.img.newboat.com.au newboat.com.au *.newboat.com.au *.random.newboat.com.au
*.imap1.pail.au pail.au *.pail.au
*.demo.sharleen.it sharleen.it *.sharleen.it *.staging.sharleen.it