SSL Certificate Analysis for admin.billzard.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=billzard.com

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

April 22, 2026

Valid Until

July 21, 2026 70 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

7A:DA:35:9D:AA:05:51:28:75:13:06:40:7C:C7:E7:7C:4D:5A:35:76:1C:02:0C:A6:9E:EB:30:07:26:DD:37:BD

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

billzard.com *.billzard.com *.admin.billzard.com *.forums.billzard.com *.ow.billzard.com

Other domains in certificate

*.dashboards.diva.it *.dev.diva.it diva.it *.diva.it *.lei.diva.it *.pop.diva.it *.portal.diva.it *.rdp.diva.it *.ssl.diva.it *.sslvpn.diva.it *.superset.diva.it *.vdi.diva.it

flamymovz.com *.flamymovz.com *.random.flamymovz.com *.ww25.flamymovz.com *.ww38.flamymovz.com

*.chart.frigohotel.it *.com.frigohotel.it *.dashboard.frigohotel.it frigohotel.it *.frigohotel.it *.intelligence.frigohotel.it *.owa.frigohotel.it

*.admin.gayromwo.com *.app.gayromwo.com *.bi.gayromwo.com *.blacklist.gayromwo.com *.chatbot.gayromwo.com *.cosmos.gayromwo.com *.demo.gayromwo.com *.dev.gayromwo.com *.facebook.gayromwo.com *.forums.gayromwo.com gayromwo.com *.gayromwo.com *.inside.gayromwo.com *.merch.gayromwo.com *.munin.gayromwo.com *.mx1.gayromwo.com *.old.gayromwo.com *.secure.gayromwo.com *.store.gayromwo.com *.sup.gayromwo.com *.superset.gayromwo.com *.test.gayromwo.com *.workflow.gayromwo.com *.ww17.gayromwo.com *.ww38.gayromwo.com *.wwl.gayromwo.com *.xn--w-boa.gayromwo.com *.zimbra.gayromwo.com

*.backend.hotflirtblonde.com *.demo.hotflirtblonde.com hotflirtblonde.com *.hotflirtblonde.com