Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=burodeprestamos.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 01, 2026
Valid Until
July 30, 2026
71 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:E4:7D:E7:C5:E5:5B:98:40:9F:BC:9D:ED:48:9F:6B:68:1C:12:02:99:75:3C:C0:26:C9:7E:96:1E:9F:4F:50
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
burodeprestamos.com
*.burodeprestamos.com
*.admin.burodeprestamos.com
*.hostmaster.burodeprestamos.com
*.www.burodeprestamos.com
*.4eb89c6e-f856-4aa1-b5b3-3704734d25e3.businesspr.org
*.api.businesspr.org
*.app.businesspr.org
*.apps.businesspr.org
*.backup.businesspr.org
businesspr.org
*.businesspr.org
*.cloud.businesspr.org
*.dashboard.businesspr.org
*.dev.businesspr.org
*.mail.businesspr.org
*.mailer.businesspr.org
*.marketing.businesspr.org
*.new.businesspr.org
*.qa.businesspr.org
*.qcyukztr.businesspr.org
*.rd.businesspr.org
*.rds.businesspr.org
*.rdweb.businesspr.org
*.remote.businesspr.org
*.secure.businesspr.org
*.staging.businesspr.org
*.stg.businesspr.org
*.uat.businesspr.org
*.v1.businesspr.org
*.v2.businesspr.org
*.www.businesspr.org
*.admin.presgogs.wtf
*.api.presgogs.wtf
*.assets.presgogs.wtf
*.backup.presgogs.wtf
*.dashboard.presgogs.wtf
*.demo.presgogs.wtf
*.dev.presgogs.wtf
*.e44a8d1a-93f8-41c9-9a7e-056377d2337e.presgogs.wtf
*.mail.presgogs.wtf
*.mailer.presgogs.wtf
*.marketing.presgogs.wtf
*.oa9dmm.presgogs.wtf
presgogs.wtf
*.presgogs.wtf
*.qa.presgogs.wtf
*.secure.presgogs.wtf
*.staging.presgogs.wtf
*.stg.presgogs.wtf
*.test.presgogs.wtf
*.uat.presgogs.wtf
*.v1.presgogs.wtf
*.v2.presgogs.wtf
*.web.presgogs.wtf
*.xrtikncw.presgogs.wtf
*.6j2z1s.skintologystockholm.info
*.a.skintologystockholm.info
*.admin.skintologystockholm.info
*.api.skintologystockholm.info
*.backup.skintologystockholm.info
*.dashboard.skintologystockholm.info
*.dev.skintologystockholm.info
*.mail.skintologystockholm.info
*.mailer.skintologystockholm.info
*.qa.skintologystockholm.info
*.rkofba.skintologystockholm.info
*.secure.skintologystockholm.info
skintologystockholm.info
*.skintologystockholm.info
*.staging.skintologystockholm.info
*.stg.skintologystockholm.info
*.uat.skintologystockholm.info
*.v1.skintologystockholm.info
*.v2.skintologystockholm.info
*.web.skintologystockholm.info
*.www.skintologystockholm.info
*.xqwcmoul.skintologystockholm.info
*.a.soultress.info
*.api.soultress.info
*.app.soultress.info
*.assets.soultress.info
*.demo.soultress.info
*.dev.soultress.info
*.ftp.soultress.info
*.members.soultress.info
soultress.info
*.soultress.info
*.transactions.soultress.info
*.xneoashop.soultress.info
Other domains in certificate