Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=1287.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 18, 2026
Valid Until
July 17, 2026
70 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:07:DC:D9:8E:9A:F9:ED:BA:0B:4B:38:20:17:A5:83:A8:8A:A6:5B:9C:0C:2F:37:C3:A7:4A:37:77:8A:8D:C8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
1287.it
*.1287.it
*.bi.1287.it
*.com.1287.it
*.console.1287.it
*.frmail.1287.it
*.h.1287.it
*.intel.1287.it
*.mail.1287.it
*.admin.dispositivisicurezza.com
*.backend.dispositivisicurezza.com
*.demo.dispositivisicurezza.com
dispositivisicurezza.com
*.dispositivisicurezza.com
*.hostmaster.dispositivisicurezza.com
*.05dbc94f-e4d0-414c-9754-3d1b4b04b75f.doodviral.info
*.1be1e069-86e6-4598-9646-00759cd030f8.doodviral.info
*.22feb24b-3b8c-4d18-82db-b4a52a3af6b5.doodviral.info
*.49b7b31e-f348-4535-901f-b1bf737ac0cf.doodviral.info
*.a.doodviral.info
*.ad70abe4-811a-4f92-b1fe-91ba9b1e908f.doodviral.info
*.admin.doodviral.info
*.api.doodviral.info
*.app.doodviral.info
*.assets.doodviral.info
*.blog.doodviral.info
*.d5972088-d2df-4f5b-ba20-5d573fbab682.doodviral.info
*.demo.doodviral.info
*.dev.doodviral.info
doodviral.info
*.doodviral.info
*.hostmaster.doodviral.info
*.staging.doodviral.info
*.test.doodviral.info
*.assets.eroticpornstars.com
eroticpornstars.com
*.eroticpornstars.com
*.m.eroticpornstars.com
*.anyconnect.gobb.org
*.apps.gobb.org
*.cisapp.gobb.org
*.clientesvpn.gobb.org
*.connect.gobb.org
*.email.gobb.org
*.exchange.gobb.org
gobb.org
*.gobb.org
*.hostmaster.gobb.org
*.mail.gobb.org
*.rds.gobb.org
*.remote.gobb.org
*.sslvpn.gobb.org
*.vpngate.gobb.org
*.webvpn.gobb.org
*.xapp.gobb.org
*.amumnsitemap.mytui.be
*.api.mytui.be
*.google.mytui.be
*.hostmaster.mytui.be
*.intranet.mytui.be
*.mwww.mytui.be
mytui.be
*.mytui.be
*.portal.mytui.be
*.random.mytui.be
*.shop.mytui.be
*.sitemap.mytui.be
*.tuifly.mytui.be
*.xn--www-dea.mytui.be
*.autodiscover.noblis-nsp.com
*.lync01.noblis-nsp.com
*.meet.noblis-nsp.com
noblis-nsp.com
*.noblis-nsp.com
*.sip.noblis-nsp.com
*.11369ab8-7465-4325-ace1-0d7afbd96af9.rewardlux.com
*.cloud.rewardlux.com
*.demo.rewardlux.com
*.iafgoscm.rewardlux.com
*.rd.rewardlux.com
*.remote.rewardlux.com
rewardlux.com
*.rewardlux.com
*.scm.rewardlux.com
*.m.sapphirebeautysupply.com
sapphirebeautysupply.com
*.sapphirebeautysupply.com
springfieldmopoverty.com
*.springfieldmopoverty.com
*.www.springfieldmopoverty.com
Other domains in certificate