Open
Cached
·
just now
91/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=hotcraft.nl
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 01, 2026
Valid Until
July 30, 2026
51 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0E:F4:22:FC:C9:14:40:35:05:23:7F:AC:D9:A3:37:84:C4:AA:4F:53:46:B2:03:0F:89:70:9E:07:A6:B7:8F:25
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
geolocation=(), midi=(), sync-xhr=(); +6 more
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
shmosnet.com
*.shmosnet.com
*.blog.shmosnet.com
*.m.shmosnet.com
*.old.shmosnet.com
*.x.shmosnet.com
665786.com
*.665786.com
*.inmoje.665786.com
agenticlinux.com
*.agenticlinux.com
*.mail01.agenticlinux.com
*.sitemap.agenticlinux.com
*.store.agenticlinux.com
*.test.agenticlinux.com
bambuser.co
*.bambuser.co
*.liveshopping.bambuser.co
*.secure.bambuser.co
*.sitemap.bambuser.co
*.sitemaps.bambuser.co
bobty2004.com
*.bobty2004.com
*.m.bobty2004.com
*.s7bghw.bobty2004.com
boxinggymmentors.com
*.boxinggymmentors.com
*.demo.boxinggymmentors.com
*.m.boxinggymmentors.com
*.sitemap.boxinggymmentors.com
*.vpn.boxinggymmentors.com
*.www.boxinggymmentors.com
dwok78804r48of42mcsnddiegsp.top
*.dwok78804r48of42mcsnddiegsp.top
*.sitemap.dwok78804r48of42mcsnddiegsp.top
*.sitemaps.dwok78804r48of42mcsnddiegsp.top
*.app.hemptemp.com
*.com.hemptemp.com
hemptemp.com
*.hemptemp.com
*.xyz.hemptemp.com
*.crm.hotcraft.nl
*.db3aad3a-929d-4719-bdab-f341de9e7716.hotcraft.nl
*.diysmxplkts.hotcraft.nl
hotcraft.nl
*.hotcraft.nl
*.hwww.hotcraft.nl
*.wew.hotcraft.nl
*.www.hotcraft.nl
*.ad.karwoodretirementretreat.com
*.client.karwoodretirementretreat.com
*.events.karwoodretirementretreat.com
*.image.karwoodretirementretreat.com
*.images.karwoodretirementretreat.com
karwoodretirementretreat.com
*.karwoodretirementretreat.com
*.loja.karwoodretirementretreat.com
*.mail.karwoodretirementretreat.com
*.market.karwoodretirementretreat.com
*.static.karwoodretirementretreat.com
*.wiki.karwoodretirementretreat.com
*.com.manpowerbc.com
manpowerbc.com
*.manpowerbc.com
*.m.poundfund.com
*.mail.poundfund.com
poundfund.com
*.poundfund.com
*.site.poundfund.com
*.superset.poundfund.com
*.a.quantumaisingapore.com
*.jabber.quantumaisingapore.com
*.login.quantumaisingapore.com
quantumaisingapore.com
*.quantumaisingapore.com
*.localhost.shmchi.com
*.neunews.shmchi.com
*.portal.shmchi.com
shmchi.com
*.shmchi.com
*.api.xxbnn.la
*.app.xxbnn.la
*.assets.xxbnn.la
*.c0eb9a27-2b02-474f-a43b-b75b866962c2.xxbnn.la
*.demo.xxbnn.la
*.hostmaster.xxbnn.la
*.test.xxbnn.la
xxbnn.la
*.xxbnn.la
Other domains in certificate