Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=wwwspireenergy.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 01, 2026
Valid Until
December 30, 2026
67 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F5:D9:A6:ED:BA:BE:63:65:8A:A1:32:1B:67:06:5F:7B:F6:D4:9F:69:EA:F7:C4:C0:87:81:29:35:CF:CD:27:DF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
wwwspireenergy.com
*.wwwspireenergy.com
*.97de2deb-cfa1-41ce-abb0-54c4d9071e7d.wwwspireenergy.com
*.admin.wwwspireenergy.com
*.api.wwwspireenergy.com
*.app.wwwspireenergy.com
*.backoffice.wwwspireenergy.com
*.bfbucportal.wwwspireenergy.com
*.cabinet.wwwspireenergy.com
*.ddfqwwap.wwwspireenergy.com
*.dev.wwwspireenergy.com
*.dgpxpstg.wwwspireenergy.com
*.fmggqstaging.wwwspireenergy.com
*.getsimnum.wwwspireenergy.com
*.home.wwwspireenergy.com
*.hostmaster.wwwspireenergy.com
*.intranet.wwwspireenergy.com
*.mailer.wwwspireenergy.com
*.mobile.wwwspireenergy.com
*.news.wwwspireenergy.com
*.rd.wwwspireenergy.com
*.rdp.wwwspireenergy.com
*.rds.wwwspireenergy.com
*.remote.wwwspireenergy.com
*.remoto.wwwspireenergy.com
*.rhrzlwap.wwwspireenergy.com
*.sitemaps.wwwspireenergy.com
*.stg.wwwspireenergy.com
*.test.wwwspireenergy.com
*.vdi.wwwspireenergy.com
*.vpn.wwwspireenergy.com
*.wap.wwwspireenergy.com
2bongss.com
*.2bongss.com
3542.org
*.3542.org
399.gold
*.399.gold
554betcs.com
*.554betcs.com
5dc1d5accca99ffa.com
*.5dc1d5accca99ffa.com
7799aa.cc
*.7799aa.cc
81948.me
*.81948.me
8344ss.com
*.8344ss.com
8jbetss.com
*.8jbetss.com
99230.me
*.99230.me
beerfridges.com.au
*.beerfridges.com.au
bhm-group.com
*.bhm-group.com
bookmark1.com
*.bookmark1.com
dizipal1072.com
*.dizipal1072.com
eurofinance.co
*.eurofinance.co
f888ss.com
*.f888ss.com
getcoddai.com
*.getcoddai.com
gostride.click
*.gostride.click
governmentgrift.com
*.governmentgrift.com
iuqtb.info
*.iuqtb.info
ivyguides.com
*.ivyguides.com
jelly-cats.site
*.jelly-cats.site
joker88gfi.xyz
*.joker88gfi.xyz
jphoki-gg.autos
*.jphoki-gg.autos
jphoki-gg.baby
*.jphoki-gg.baby
jphoki-gg.homes
*.jphoki-gg.homes
ku19ss.com
*.ku19ss.com
lsw.in
*.lsw.in
maomaoyu.sbs
*.maomaoyu.sbs
Other domains in certificate