Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=kaisland.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 22, 2026
Valid Until
December 21, 2026 49 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
91:31:13:49:7F:E7:4A:40:61:F3:13:5B:A9:9E:6B:4A:C9:AB:6D:8F:F5:59:5B:0E:0D:44:E4:03:B6:E8:77:D0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
nemu.it *.nemu.it *.app.nemu.it *.backend.nemu.it *.hostmaster.nemu.it

Other domains in certificate

1049.it *.1049.it *.app.1049.it *.hostmaster.1049.it *.wwww.1049.it
5280urbanlife.com *.5280urbanlife.com *.m.5280urbanlife.com
*.adm.chonviec.info chonviec.info *.chonviec.info
*.admin.colorpower.it colorpower.it *.colorpower.it *.dashboard.colorpower.it *.demo.colorpower.it *.dev.colorpower.it *.mx.colorpower.it *.staging.colorpower.it *.superset.colorpower.it *.www.colorpower.it
dfdconstruction.com *.dfdconstruction.com *.znpob.dfdconstruction.com
*.b2c.elonearn.pro *.cms.elonearn.pro elonearn.pro *.elonearn.pro *.internal.elonearn.pro *.oa.elonearn.pro *.ww38.elonearn.pro
fby3.icu *.fby3.icu
hlfulioz.buzz *.hlfulioz.buzz *.osszbly.hlfulioz.buzz
*.0cdgj8ke8zjlajea.kaisland.com *.auth.kaisland.com kaisland.com *.kaisland.com *.orion.kaisland.com *.test.kaisland.com *.win7.kaisland.com
linkpan44.com *.linkpan44.com *.ww12.linkpan44.com
*.25507eda3c2f.momvids.pro *.74d1fdd48e27.momvids.pro *.access.momvids.pro *.admin.momvids.pro *.admin2.momvids.pro *.app.momvids.pro *.b85abe30-62b7-43f7-90d9-cac36ef5c43d.momvids.pro *.backoffice.momvids.pro *.client.momvids.pro *.console.momvids.pro *.corp.momvids.pro *.dashboard.momvids.pro *.dev.momvids.pro *.eu.momvids.pro *.internal.momvids.pro momvids.pro *.momvids.pro *.portal.momvids.pro *.preprod.momvids.pro *.staging.momvids.pro *.test.momvids.pro *.tools.momvids.pro *.ww25.momvids.pro *.ww38.momvids.pro
*.admin.russfestival.org *.edu.russfestival.org *.m.russfestival.org *.mx.russfestival.org *.planetart.russfestival.org russfestival.org *.russfestival.org *.ww1.russfestival.org
*.m.trevor.biz *.smtp.trevor.biz trevor.biz *.trevor.biz
*.comwww.zbnz.com zbnz.com *.zbnz.com