76/100 SECURITY SCORE

Certificate Information

Subject
CN=nightheatersolutions.co.uk
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 18, 2026
Valid Until
September 16, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:46:64:F8:61:FB:FB:72:0D:2F:38:DF:6D:CC:5D:C5:44:D6:A2:E4:94:A9:85:E6:A8:F2:BD:75:FA:BB:02:A9
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
webtutorial.it *.webtutorial.it *.cpcontacts.webtutorial.it *.mwww.webtutorial.it *.webdisk.webtutorial.it *.www.webtutorial.it

Other domains in certificate

42657.vip *.42657.vip *.m.42657.vip
*.app.appvuive.app appvuive.app *.appvuive.app
candyex.info *.candyex.info *.colegionms.candyex.info
christiancompanies.com.au *.christiancompanies.com.au *.mail.christiancompanies.com.au
dealerconsult.com *.dealerconsult.com *.wildcard.dealerconsult.com
detiz.com *.detiz.com *.mail.detiz.com *.wildcard.detiz.com
elbyr.autos *.elbyr.autos *.mail.elbyr.autos
hania.live *.hania.live *.hottie.hania.live
*.32.innerdesign.studio *.comune.innerdesign.studio innerdesign.studio *.innerdesign.studio
internationparceltracking.com *.internationparceltracking.com *.ww25.internationparceltracking.com
*.com.m12.cc *.lordseriaal.m12.cc m12.cc *.m12.cc *.qa.m12.cc
*.comune.miacandy.bio miacandy.bio *.miacandy.bio
*.4qwa0.mmq1.xyz *.fdy0p.mmq1.xyz mmq1.xyz *.mmq1.xyz
mycarbonboxmedia.com *.mycarbonboxmedia.com *.preprod.mycarbonboxmedia.com
*.admin.nightheatersolutions.co.uk *.cpanel.nightheatersolutions.co.uk nightheatersolutions.co.uk *.nightheatersolutions.co.uk *.portal.nightheatersolutions.co.uk *.pos.nightheatersolutions.co.uk
*.box.princess.bet princess.bet *.princess.bet *.staging.princess.bet *.ww38.princess.bet
*.pay.puttpar.com puttpar.com *.puttpar.com
*.app.read-dukependragon.online *.cpcalendars.read-dukependragon.online *.mail.read-dukependragon.online read-dukependragon.online *.read-dukependragon.online *.sitemap.read-dukependragon.online *.sitemaps.read-dukependragon.online
*.admin.realmarket.it *.demo.realmarket.it realmarket.it *.realmarket.it
*.hvax4i.remodelsettlehome.com remodelsettlehome.com *.remodelsettlehome.com
sexyscope.live *.sexyscope.live *.www.sexyscope.live
vulkan777-av4.top *.vulkan777-av4.top *.www.vulkan777-av4.top
watchfacesfacet.com *.watchfacesfacet.com *.ww25.watchfacesfacet.com