Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=discoverable.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 02, 2026
Valid Until
August 31, 2026
77 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0D:0E:28:6D:F3:1C:C3:AB:CF:E4:38:47:8B:09:07:82:CD:D5:24:40:A5:EB:E7:BC:1A:EE:5A:8E:B6:AC:88:6E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
84820.one
*.84820.one
02838.loan
*.02838.loan
15xc.cc
*.15xc.cc
*.3f57a8b6-6d86-4901-9b21-04a8fee4133c.15xc.cc
*.account.15xc.cc
*.auth.15xc.cc
*.backoffice.15xc.cc
*.cabinet.15xc.cc
*.client.15xc.cc
*.e7745d55-877c-4264-a4f5-c9496194cb60.15xc.cc
*.login.15xc.cc
*.www.15xc.cc
73904.one
*.73904.one
*.a.askgerald.info
*.admin.askgerald.info
*.api.askgerald.info
*.app.askgerald.info
askgerald.info
*.askgerald.info
*.ba9a61bc-184b-452b-8d50-472c6fd3471c.askgerald.info
*.demo.askgerald.info
*.dev.askgerald.info
*.m.askgerald.info
*.mail.askgerald.info
*.staging.askgerald.info
*.test.askgerald.info
*.admin.devamajig.net
*.app.devamajig.net
devamajig.net
*.devamajig.net
*.app.discoverable.com
*.backend.discoverable.com
*.blog.discoverable.com
*.c.discoverable.com
*.demo.discoverable.com
discoverable.com
*.discoverable.com
*.notexistsww42.discoverable.com
*.staging.discoverable.com
gogradientlabs.com
*.gogradientlabs.com
*.hw1ei4.gogradientlabs.com
*.vpn.gogradientlabs.com
*.app.herk.xyz
*.comune.herk.xyz
*.d.herk.xyz
herk.xyz
*.herk.xyz
*.ww38.herk.xyz
*.beta.istanbulcircuit.com
*.blog.istanbulcircuit.com
*.crm.istanbulcircuit.com
*.demo.istanbulcircuit.com
*.forum.istanbulcircuit.com
*.forums.istanbulcircuit.com
*.help.istanbulcircuit.com
istanbulcircuit.com
*.istanbulcircuit.com
*.m.istanbulcircuit.com
*.old.istanbulcircuit.com
*.vpn.istanbulcircuit.com
*.admin.occhialidasoleprezzo.it
occhialidasoleprezzo.it
*.occhialidasoleprezzo.it
*.admin.winebrats.net
*.api.winebrats.net
*.app.winebrats.net
*.cisco.winebrats.net
*.dashboards.winebrats.net
*.data.winebrats.net
*.internal.winebrats.net
*.m.winebrats.net
*.members.winebrats.net
*.notexistsapi.winebrats.net
*.redash.winebrats.net
*.report.winebrats.net
*.webmail.winebrats.net
winebrats.net
*.winebrats.net
*.ww38.winebrats.net
*.www.winebrats.net
*.m.worlddentities.com
*.members.worlddentities.com
worlddentities.com
*.worlddentities.com
*.www.worlddentities.com
Other domains in certificate