76/100 SECURITY SCORE

Certificate Information

Subject
CN=officeequipment.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
March 26, 2026
Valid Until
June 24, 2026 42 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:F7:50:64:38:4A:33:03:9A:23:BB:4F:4E:84:F8:9D:CC:DD:3C:14:A3:0A:65:C6:CB:A5:3C:C3:47:94:74:E5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
exerciseinstructors.org.uk *.exerciseinstructors.org.uk *.admin.exerciseinstructors.org.uk *.api.exerciseinstructors.org.uk *.blog.exerciseinstructors.org.uk *.dev.exerciseinstructors.org.uk *.ftp.exerciseinstructors.org.uk *.mail.exerciseinstructors.org.uk *.mbcefadmin.exerciseinstructors.org.uk *.members.exerciseinstructors.org.uk *.portal.exerciseinstructors.org.uk *.prod.exerciseinstructors.org.uk *.report.exerciseinstructors.org.uk *.staging.exerciseinstructors.org.uk *.test.exerciseinstructors.org.uk

Other domains in certificate

61123.xyz *.61123.xyz *.d.61123.xyz
*.419fe243-b5c4-4d4f-b5d8-c00f93a49d4a.freelancemodel.co.uk *.a397b4b8-9eb9-4b74-8e8c-878ac6494ae4.freelancemodel.co.uk *.admin.freelancemodel.co.uk *.analytic.freelancemodel.co.uk *.analytics.freelancemodel.co.uk *.analyze.freelancemodel.co.uk *.api.freelancemodel.co.uk *.app.freelancemodel.co.uk *.backend.freelancemodel.co.uk *.backup.freelancemodel.co.uk *.dashboard.freelancemodel.co.uk *.data.freelancemodel.co.uk *.demo.freelancemodel.co.uk *.desktop.freelancemodel.co.uk *.dev.freelancemodel.co.uk freelancemodel.co.uk *.freelancemodel.co.uk *.ftp.freelancemodel.co.uk *.intel.freelancemodel.co.uk *.intelligence.freelancemodel.co.uk *.mail.freelancemodel.co.uk *.mailer.freelancemodel.co.uk *.marketing.freelancemodel.co.uk *.mta-sts.freelancemodel.co.uk *.ncrrbwebmail.freelancemodel.co.uk *.new.freelancemodel.co.uk *.pop.freelancemodel.co.uk *.qa.freelancemodel.co.uk *.ra.freelancemodel.co.uk *.rdp.freelancemodel.co.uk *.report.freelancemodel.co.uk *.secure.freelancemodel.co.uk *.staging.freelancemodel.co.uk *.stg.freelancemodel.co.uk *.superset.freelancemodel.co.uk *.test-flowiseai.freelancemodel.co.uk *.tptrcv2.freelancemodel.co.uk *.ts.freelancemodel.co.uk *.uat.freelancemodel.co.uk *.v2.freelancemodel.co.uk *.vdi.freelancemodel.co.uk *.vpnssl.freelancemodel.co.uk *.web.freelancemodel.co.uk *.webmail.freelancemodel.co.uk *.www.freelancemodel.co.uk
*.10horses.ksdrilling.com *.ajw.ksdrilling.com ksdrilling.com *.ksdrilling.com *.lyncdiscoverinternal.ksdrilling.com *.m.ksdrilling.com *.mail.ksdrilling.com *.manohar.ksdrilling.com *.mx1.ksdrilling.com *.nakorika.ksdrilling.com *.sappynuts.ksdrilling.com *.sheppard.ksdrilling.com *.smtp.ksdrilling.com *.vff.ksdrilling.com *.ww25.ksdrilling.com *.ww38.ksdrilling.com
*.admin.officeequipment.it *.dev.officeequipment.it *.hostmaster.officeequipment.it officeequipment.it *.officeequipment.it *.remote.officeequipment.it
rainbet3.com *.rainbet3.com *.rustore.rainbet3.com *.test.rainbet3.com *.vpn.rainbet3.com