Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=play.movie
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026
72 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
14:5C:54:99:CF:54:6A:54:6B:11:57:C2:00:CF:8F:78:A8:1A:69:3D:16:4C:D6:EB:16:E4:85:4E:4B:CE:D2:2F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
resign.it
*.resign.it
play-victory-sphere.xyz
*.play-victory-sphere.xyz
play-zephyr-trail.xyz
*.play-zephyr-trail.xyz
play.movie
*.play.movie
pohon8-blue.com
*.pohon8-blue.com
poppix.bet
*.poppix.bet
pottytrain.blog
*.pottytrain.blog
powerbag.it
*.powerbag.it
powers.it
*.powers.it
ppk24.top
*.ppk24.top
practicaldiyprojects.xyz
*.practicaldiyprojects.xyz
predict.it
*.predict.it
prediksisemar-air.xyz
*.prediksisemar-air.xyz
prestitistarfin.it
*.prestitistarfin.it
previews.it
*.previews.it
primetradex.org
*.primetradex.org
priprilod.com
*.priprilod.com
professionalagent.it
*.professionalagent.it
profid.it
*.profid.it
projecthelp.org
*.projecthelp.org
pyreneances.com
*.pyreneances.com
qeleva.com
*.qeleva.com
quickfitnessfix.run
*.quickfitnessfix.run
quisque.it
*.quisque.it
quote-calcio.it
*.quote-calcio.it
r1kky4y.shop
*.r1kky4y.shop
racegoddess.com
*.racegoddess.com
rapisarda.it
*.rapisarda.it
rav75.top
*.rav75.top
realestateinformations.com
*.realestateinformations.com
realidad.it
*.realidad.it
recehglobal.info
*.recehglobal.info
recinzioniinalluminio.it
*.recinzioniinalluminio.it
redcouch.it
*.redcouch.it
redeem99.com
*.redeem99.com
redlinestrategy.com
*.redlinestrategy.com
refis.io
*.refis.io
represents.it
*.represents.it
residenzaprivata.it
*.residenzaprivata.it
restare.it
*.restare.it
richiestadanni.it
*.richiestadanni.it
rickard.it
*.rickard.it
roms4all.com
*.roms4all.com
rorangenet-634.top
*.rorangenet-634.top
rubixevents.com
*.rubixevents.com
Other domains in certificate