Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=sportingstore.it
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
November 03, 2026
Valid Until
February 01, 2027 77 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
D0:DC:62:29:D4:B1:37:76:FA:7A:2A:0B:0E:18:9A:54:1E:E9:E8:4C:67:4A:B3:09:89:52:42:9B:18:D3:A9:A5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
yaba.it *.yaba.it *.admin.yaba.it *.autoconfig.yaba.it *.bi.yaba.it *.bigdata.yaba.it *.correu.yaba.it *.dashboard.yaba.it *.dashs.yaba.it *.data.yaba.it *.demo.yaba.it *.eposta.yaba.it *.ex02.yaba.it *.exchange.yaba.it *.exchangecorp.yaba.it *.exmail2.yaba.it *.hostmaster.yaba.it *.imap.yaba.it *.intel.yaba.it *.intelligence.yaba.it *.mail.yaba.it *.mail1.yaba.it *.mymail.yaba.it *.notexistsadmin.yaba.it *.notexistsrds.yaba.it *.ogrencieposta.yaba.it *.outlook.yaba.it *.owa.yaba.it *.rds.yaba.it *.remote.yaba.it *.smtpa.yaba.it *.superset.yaba.it

Other domains in certificate

*.1998love.belogfa.com *.amifa.belogfa.com *.amirmirkhodaeeii.belogfa.com *.argena.belogfa.com belogfa.com *.belogfa.com *.cabinmagic.belogfa.com *.delaram71.belogfa.com *.gedaei.belogfa.com *.gtm.belogfa.com *.hamed.belogfa.com *.hiva333.belogfa.com *.iranwetland.belogfa.com *.jak.belogfa.com *.khairmuhammad.belogfa.com *.kish2000.belogfa.com *.maedehshirzad.belogfa.com *.mamadona.belogfa.com *.masjedamir.belogfa.com *.mohadeseh80.belogfa.com *.mohammad.belogfa.com *.mohsenomahta.belogfa.com *.myvoicem.belogfa.com *.pooya9.belogfa.com *.rapsoal.belogfa.com *.sagheye-gandom.belogfa.com *.saharasgharyan.belogfa.com *.sepidehniloo.belogfa.com *.sh-bazaresham.belogfa.com *.sokut-tanhaei.belogfa.com *.tafakoreziba.belogfa.com
*.addressed.observations.it *.admin.observations.it *.answers.observations.it *.app.observations.it *.bohurborod.observations.it *.conditions.observations.it *.dashboard.observations.it *.demo.observations.it *.hostmaster.observations.it *.hurborod.observations.it *.intelligence.observations.it *.iv.observations.it *.labour.observations.it *.metric.observations.it observations.it *.observations.it *.observations.observations.it *.recovery.observations.it *.remote.observations.it *.theevening.observations.it *.www.observations.it
*.hostmaster.sportingstore.it *.login.sportingstore.it *.mail.sportingstore.it sportingstore.it *.sportingstore.it *.www.sportingstore.it