76/100 SECURITY SCORE

Certificate Information

Subject
CN=gemmabet.io
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 24, 2026
Valid Until
July 23, 2026 40 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2B:43:C2:40:A7:79:1A:6A:22:A8:07:86:F4:7F:FA:C0:5C:89:72:C4:57:6A:9B:4E:43:42:4B:6D:33:5E:3E:0E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
easylearning.it *.easylearning.it *.admin.easylearning.it *.hostmaster.easylearning.it

Other domains in certificate

animale.life *.animale.life *.cpanel.animale.life *.mail.animale.life *.webmail.animale.life
awesome-tv.live *.awesome-tv.live *.mail.awesome-tv.live
*.admin.besttuneronline.com besttuneronline.com *.besttuneronline.com *.chem.besttuneronline.com *.comment.besttuneronline.com *.fortuna.besttuneronline.com *.houston.besttuneronline.com *.smaww.besttuneronline.com *.smtp01.besttuneronline.com *.vespa.besttuneronline.com
chessdb.io *.chessdb.io *.ww38.chessdb.io *.www.chessdb.io
christianjoy.com *.christianjoy.com
*.ci.eco-friendly-homes.online eco-friendly-homes.online *.eco-friendly-homes.online *.qa.eco-friendly-homes.online *.sitemaps.eco-friendly-homes.online
efood.live *.efood.live
*.dev.filmscore.co filmscore.co *.filmscore.co *.magento.filmscore.co *.sitemap.filmscore.co *.support.filmscore.co
*.cf2339310585.gemmabet.io *.cpcalendars.gemmabet.io *.cpcontacts.gemmabet.io gemmabet.io *.gemmabet.io *.member.gemmabet.io *.sitemaps.gemmabet.io *.ww25.gemmabet.io *.ww38.gemmabet.io
greenappleindustries.com *.greenappleindustries.com *.mail.greenappleindustries.com
hamiklai5.click *.hamiklai5.click
hone.agency *.hone.agency
laiserhillacademy.com *.laiserhillacademy.com *.resleet.laiserhillacademy.com
lucentindustries.life *.lucentindustries.life *.ww25.lucentindustries.life
*.gateway.merrillslynch.cc merrillslynch.cc *.merrillslynch.cc *.ww38.merrillslynch.cc *.www.merrillslynch.cc
*.m.mindomayachocolate.com mindomayachocolate.com *.mindomayachocolate.com *.sitemap.mindomayachocolate.com *.ww25.mindomayachocolate.com *.ww38.mindomayachocolate.com
mutualfunds-investment.com *.mutualfunds-investment.com *.www.mutualfunds-investment.com
scentualaromas.co.uk *.scentualaromas.co.uk *.smtp.scentualaromas.co.uk
spened.xyz *.spened.xyz
*.first.unmingled.com *.mx.unmingled.com *.remain.unmingled.com unmingled.com *.unmingled.com *.www.unmingled.com
wheelclamps.au *.wheelclamps.au