76/100 SECURITY SCORE

Certificate Information

Subject
CN=vigotop.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 03, 2026
Valid Until
July 02, 2026 55 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
24:7B:1E:64:19:4D:D7:39:FC:33:1E:92:B0:3B:72:55:59:50:3A:39:D2:B8:42:C6:44:14:FA:08:22:27:76:A1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
probability.it *.probability.it *.backend.probability.it *.dev.probability.it *.hostmaster.probability.it *.remote.probability.it *.staging.probability.it

Other domains in certificate

*.backup.daproduction.in *.cpanel.daproduction.in daproduction.in *.daproduction.in *.e949e950-3dd1-46ba-9ee9-c192a1ee39b3.daproduction.in *.ftp.daproduction.in *.iqypmjwo.daproduction.in *.m.daproduction.in *.mailer.daproduction.in *.marketing.daproduction.in *.mta-sts.daproduction.in *.secure.daproduction.in *.sfdznvmc.daproduction.in *.skmdtwvu.daproduction.in *.v1.daproduction.in *.www.daproduction.in
*.ims.olfytech.com olfytech.com *.olfytech.com
*.api.ranchodelmar.net *.blog.ranchodelmar.net *.cpanel.ranchodelmar.net *.ftp.ranchodelmar.net *.hostmaster.ranchodelmar.net *.localhost.ranchodelmar.net *.m.ranchodelmar.net *.mail.ranchodelmar.net ranchodelmar.net *.ranchodelmar.net *.staging.ranchodelmar.net *.status.ranchodelmar.net *.webdisk.ranchodelmar.net *.webmail.ranchodelmar.net *.whm.ranchodelmar.net *.www.ranchodelmar.net
*.786a9a6f-0989-4bc2-946e-b5d6dbbd8eb3.thedachshundblog.com *.admin.thedachshundblog.com *.api.thedachshundblog.com *.app.thedachshundblog.com *.assets.thedachshundblog.com *.backup.thedachshundblog.com *.bfxrndev.thedachshundblog.com *.blog.thedachshundblog.com *.bxasmzjn.thedachshundblog.com *.dashboard.thedachshundblog.com *.demo.thedachshundblog.com *.dev.thedachshundblog.com *.development.thedachshundblog.com *.gaqtyihl.thedachshundblog.com *.hostmaster.thedachshundblog.com *.ktmubhow.thedachshundblog.com *.lxvhladmin.thedachshundblog.com *.mail.thedachshundblog.com *.mailer.thedachshundblog.com *.marketing.thedachshundblog.com *.mrksaypd.thedachshundblog.com *.qa.thedachshundblog.com *.secure.thedachshundblog.com *.staging.thedachshundblog.com *.stg.thedachshundblog.com *.test.thedachshundblog.com thedachshundblog.com *.thedachshundblog.com *.uat.thedachshundblog.com *.v1.thedachshundblog.com *.v2.thedachshundblog.com *.www.thedachshundblog.com
*.1c0eff2c5f13.vigotop.com *.at.vigotop.com *.dc-a4649c0db7db.vigotop.com *.hu.vigotop.com *.it.vigotop.com *.send.vigotop.com *.si.vigotop.com *.sk.vigotop.com *.talkingtrehu.vigotop.com vigotop.com *.vigotop.com
*.com.www-842299.com *.net.www-842299.com www-842299.com *.www-842299.com