Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=canzano.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 10, 2026
Valid Until
December 09, 2026 41 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A2:C2:C7:0D:EB:80:78:9F:51:88:70:0B:5F:AE:C9:E4:C2:FC:DE:EC:72:13:71:3F:8B:B3:C1:39:05:48:79:C1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
cipher.it *.cipher.it *.admin.cipher.it *.analytics.cipher.it *.api.cipher.it *.app.cipher.it *.backend.cipher.it *.chart.cipher.it *.dashboard.cipher.it *.hostmaster.cipher.it *.mx.cipher.it *.staging.cipher.it *.www.cipher.it

Other domains in certificate

*.airasia.bandarudara.com bandarudara.com *.bandarudara.com *.berita.bandarudara.com *.blog.bandarudara.com *.booking.bandarudara.com *.diary.bandarudara.com *.linusairways.bandarudara.com *.pac.bandarudara.com *.tiketpesawat.bandarudara.com
*.awkword.bandmap.com bandmap.com *.bandmap.com *.jkush.bandmap.com *.overwerk.bandmap.com
*.applications.cameradoppia.it cameradoppia.it *.cameradoppia.it *.citrix.cameradoppia.it *.citrixcloud.cameradoppia.it *.cuvpn.cameradoppia.it *.desktop.cameradoppia.it *.email.cameradoppia.it *.gp.cameradoppia.it *.hostmaster.cameradoppia.it *.imap.cameradoppia.it *.khapps.cameradoppia.it *.mail.cameradoppia.it *.man.cameradoppia.it *.rdweb.cameradoppia.it *.remote.cameradoppia.it *.sslvpn.cameradoppia.it *.vpn-ext.cameradoppia.it *.vpn2x.cameradoppia.it *.vpnadm.cameradoppia.it *.vpngw.cameradoppia.it *.vpntoj.cameradoppia.it *.webmail.cameradoppia.it *.webvpn.cameradoppia.it
canzano.com *.canzano.com *.gtwok.canzano.com
*.backend.electromobility.info electromobility.info *.electromobility.info *.gitlab.electromobility.info *.pop.electromobility.info
inaba.it *.inaba.it *.mx.inaba.it *.notexistsmx.inaba.it *.notexistsrelay.inaba.it *.notexistssmtpmail.inaba.it
intcosoft.com *.intcosoft.com
lagino.xyz *.lagino.xyz
lionandphoenix.com *.lionandphoenix.com
miarealtor.com *.miarealtor.com
*.app.rebuthehadstay.info *.intranet.rebuthehadstay.info rebuthehadstay.info *.rebuthehadstay.info
*.admin.sar.cards *.app.sar.cards *.dashboard.sar.cards sar.cards *.sar.cards
*.app.tivimax.com *.codecov.tivimax.com tivimax.com *.tivimax.com
*.apps.tuoku466.xyz tuoku466.xyz *.tuoku466.xyz