Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=mygswater.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 19, 2026
Valid Until
January 17, 2027 79 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C5:0B:80:1D:95:B6:07:94:C2:C6:E0:0B:D9:3E:F0:DD:3D:1E:61:96:C6:C8:97:F9:0D:BA:EC:A4:E9:36:0E:91
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
quaglie.com *.quaglie.com *.admin.quaglie.com *.analytics.quaglie.com *.api.quaglie.com *.app.quaglie.com *.argo.quaglie.com *.dashboard.quaglie.com *.data.quaglie.com *.demo.quaglie.com *.dev.quaglie.com *.forecast.quaglie.com *.integration.quaglie.com *.mail.quaglie.com *.mail2.quaglie.com *.redash.quaglie.com *.report.quaglie.com *.staging.quaglie.com *.superset.quaglie.com *.ww42.quaglie.com

Other domains in certificate

johanhellstrom.com *.johanhellstrom.com
*.dashboard.lonetti.com lonetti.com *.lonetti.com *.mail.lonetti.com *.mail2.lonetti.com
*.hostmaster.musicalmente.com *.mail2.musicalmente.com musicalmente.com *.musicalmente.com
*.gswater.mygswater.com *.hostmaster.mygswater.com mygswater.com *.mygswater.com *.random.mygswater.com
*.mail.nrimoveis.com nrimoveis.com *.nrimoveis.com *.www.nrimoveis.com
*.hostmaster.personalizzazioni.com *.mail2.personalizzazioni.com personalizzazioni.com *.personalizzazioni.com
*.admin.procuratorilegali.com *.alpha.procuratorilegali.com *.api.procuratorilegali.com *.backend.procuratorilegali.com *.dashboards.procuratorilegali.com *.dashs.procuratorilegali.com *.demo.procuratorilegali.com *.dev.procuratorilegali.com *.hostmaster.procuratorilegali.com *.mail.procuratorilegali.com *.mail2.procuratorilegali.com procuratorilegali.com *.procuratorilegali.com *.production.procuratorilegali.com *.redash.procuratorilegali.com *.staging.procuratorilegali.com *.workflow.procuratorilegali.com *.ww42.procuratorilegali.com
*.mail.prodottiaziende.com *.mail2.prodottiaziende.com prodottiaziende.com *.prodottiaziende.com
*.admin.ronago.com *.api.ronago.com *.argo.ronago.com *.bi.ronago.com *.dashboard.ronago.com *.dev.ronago.com *.hostmaster.ronago.com *.mail2.ronago.com *.nullmx.ronago.com *.reports.ronago.com ronago.com *.ronago.com *.superset.ronago.com *.workflow.ronago.com *.ww42.ronago.com
*.mail.sanferdinando.com *.mail2.sanferdinando.com sanferdinando.com *.sanferdinando.com
*.ffffffffffff.transiti.com *.mail.transiti.com *.mail2.transiti.com transiti.com *.transiti.com