75/100 SECURITY SCORE

Certificate Information

Subject
CN=larroca.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 02, 2026
Valid Until
December 31, 2026 78 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
DC:BA:78:0F:5E:9A:4A:E8:1D:6A:C8:8D:C9:FB:48:B8:51:1E:EA:F4:1E:F0:39:1E:0D:E4:F0:58:CA:4A:6C:69
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
pestshield.com.au *.pestshield.com.au *.analytic.pestshield.com.au *.autodiscover.pestshield.com.au *.ci.pestshield.com.au *.cpanel.pestshield.com.au *.cpcalendars.pestshield.com.au *.cpcontacts.pestshield.com.au *.ftp.pestshield.com.au *.mail.pestshield.com.au *.webdisk.pestshield.com.au *.webmail.pestshield.com.au *.ww16.pestshield.com.au *.ww25.pestshield.com.au *.ww38.pestshield.com.au

Other domains in certificate

*.admin.adultbusiness.pro *.admin4.adultbusiness.pro *.administration.adultbusiness.pro adultbusiness.pro *.adultbusiness.pro *.app.adultbusiness.pro *.beta.adultbusiness.pro *.console.adultbusiness.pro *.dashboard.adultbusiness.pro *.portal.adultbusiness.pro *.staging.adultbusiness.pro *.test.adultbusiness.pro *.v2.adultbusiness.pro
8eb81fed-2fe0-439a-9ffa-b935a41c92af.gdk.au c1565d85-199a-4e25-b7bd-63ce9c844b6d.gdk.au client.gdk.au e4107c4e-2f8f-4c86-a337-40e7632f4ae1.gdk.au emv1.gdk.au gdk.au iam.gdk.au m.gdk.au members.gdk.au register.gdk.au shorturl.gdk.au suntok.gdk.au www.gdk.au
kickassanime.info *.kickassanime.info *.staging.kickassanime.info *.ww38.kickassanime.info
larroca.com *.larroca.com
leicsa.com *.leicsa.com *.mx.leicsa.com
m3eq2hdz.world *.m3eq2hdz.world
migyfysoxe.pro *.migyfysoxe.pro
my-health.blog *.my-health.blog
nupurusaz.pro *.nupurusaz.pro
*.demo.royallookz.com royallookz.com *.royallookz.com
*.32.tombet.live *.app.tombet.live tombet.live *.tombet.live
3bae7bd2-af4e-4a4c-a9ea-ec56834e5960.trumpet.au authlogin.trumpet.au employee-sso.trumpet.au emv1.trumpet.au exchange.trumpet.au f397cea3-5884-4f58-a4f0-669b722a2c44.trumpet.au ftp.trumpet.au hba.trumpet.au imap.trumpet.au imap2.trumpet.au iyiitwebmail.trumpet.au m.trumpet.au mail.trumpet.au mail1.trumpet.au mailhost.trumpet.au media.trumpet.au mta-sts.trumpet.au smtp.trumpet.au trumpet.au webmail.trumpet.au whale.trumpet.au www.trumpet.au xhtgyemv1.trumpet.au