Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=redd.mx
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 06, 2026
Valid Until
May 07, 2026
70 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CC:E1:A9:F6:E0:29:A4:15:C7:2D:F2:25:84:6E:34:42:A8:5F:BD:5C:B9:03:B6:E2:1F:79:30:B3:89:63:70:AC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
zigblog.net
*.zigblog.net
innovainnova.co
*.innovainnova.co
inspireblog.fr
*.inspireblog.fr
iowahelicopter.com
*.iowahelicopter.com
profepaco.com.mx
*.profepaco.com.mx
programa-ana.com
*.programa-ana.com
prologosconsultoresasociados.cl
*.prologosconsultoresasociados.cl
pronoticias24.com
*.pronoticias24.com
propbox.nl
*.propbox.nl
proximusmail.be
*.proximusmail.be
pythfoxzz.buzz
*.pythfoxzz.buzz
quartier-manchester.uk
*.quartier-manchester.uk
quickgrades.us
*.quickgrades.us
ramorstrutz.com
*.ramorstrutz.com
rbpem.wang
*.rbpem.wang
rebbenationals.com
*.rebbenationals.com
redd.mx
*.redd.mx
relojes-inteligentes.es
*.relojes-inteligentes.es
rendertech.es
*.rendertech.es
righteous.se
*.righteous.se
ristrutturo.it
*.ristrutturo.it
wbgmt.cc
*.wbgmt.cc
webtube.me
*.webtube.me
wemed.fr
*.wemed.fr
wenodoapp.net
*.wenodoapp.net
whisperingheat.com
*.whisperingheat.com
wikide.org
*.wikide.org
worldtbook.com
*.worldtbook.com
wv40zcfd.com
*.wv40zcfd.com
wwwbzah.cc
*.wwwbzah.cc
xjcloud.link
*.xjcloud.link
xn--9kqy4svodv7p6xd.com
*.xn--9kqy4svodv7p6xd.com
xn--9kqy5kyqb.com
*.xn--9kqy5kyqb.com
xnx.social
*.xnx.social
xnxx-sex.net
*.xnxx-sex.net
xpanas.cam
*.xpanas.cam
xxxtube.desi
*.xxxtube.desi
y47877569.vip
*.y47877569.vip
ybs0429.shop
*.ybs0429.shop
zahnarztangst.at
*.zahnarztangst.at
zdravomyslie.info
*.zdravomyslie.info
znayka.pw
*.znayka.pw
zombicity.info
*.zombicity.info
zonaspalni.com
*.zonaspalni.com
zwembaddeterp.nl
*.zwembaddeterp.nl
Other domains in certificate