Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=canzano.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 10, 2026
Valid Until
December 09, 2026
41 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A2:C2:C7:0D:EB:80:78:9F:51:88:70:0B:5F:AE:C9:E4:C2:FC:DE:EC:72:13:71:3F:8B:B3:C1:39:05:48:79:C1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
cipher.it
*.cipher.it
*.admin.cipher.it
*.analytics.cipher.it
*.api.cipher.it
*.app.cipher.it
*.backend.cipher.it
*.chart.cipher.it
*.dashboard.cipher.it
*.hostmaster.cipher.it
*.mx.cipher.it
*.staging.cipher.it
*.www.cipher.it
*.airasia.bandarudara.com
bandarudara.com
*.bandarudara.com
*.berita.bandarudara.com
*.blog.bandarudara.com
*.booking.bandarudara.com
*.diary.bandarudara.com
*.linusairways.bandarudara.com
*.pac.bandarudara.com
*.tiketpesawat.bandarudara.com
*.awkword.bandmap.com
bandmap.com
*.bandmap.com
*.jkush.bandmap.com
*.overwerk.bandmap.com
*.applications.cameradoppia.it
cameradoppia.it
*.cameradoppia.it
*.citrix.cameradoppia.it
*.citrixcloud.cameradoppia.it
*.cuvpn.cameradoppia.it
*.desktop.cameradoppia.it
*.email.cameradoppia.it
*.gp.cameradoppia.it
*.hostmaster.cameradoppia.it
*.imap.cameradoppia.it
*.khapps.cameradoppia.it
*.mail.cameradoppia.it
*.man.cameradoppia.it
*.rdweb.cameradoppia.it
*.remote.cameradoppia.it
*.sslvpn.cameradoppia.it
*.vpn-ext.cameradoppia.it
*.vpn2x.cameradoppia.it
*.vpnadm.cameradoppia.it
*.vpngw.cameradoppia.it
*.vpntoj.cameradoppia.it
*.webmail.cameradoppia.it
*.webvpn.cameradoppia.it
canzano.com
*.canzano.com
*.gtwok.canzano.com
*.backend.electromobility.info
electromobility.info
*.electromobility.info
*.gitlab.electromobility.info
*.pop.electromobility.info
inaba.it
*.inaba.it
*.mx.inaba.it
*.notexistsmx.inaba.it
*.notexistsrelay.inaba.it
*.notexistssmtpmail.inaba.it
intcosoft.com
*.intcosoft.com
lagino.xyz
*.lagino.xyz
lionandphoenix.com
*.lionandphoenix.com
miarealtor.com
*.miarealtor.com
*.app.rebuthehadstay.info
*.intranet.rebuthehadstay.info
rebuthehadstay.info
*.rebuthehadstay.info
*.admin.sar.cards
*.app.sar.cards
*.dashboard.sar.cards
sar.cards
*.sar.cards
*.app.tivimax.com
*.codecov.tivimax.com
tivimax.com
*.tivimax.com
*.apps.tuoku466.xyz
tuoku466.xyz
*.tuoku466.xyz
Other domains in certificate