76/100 SECURITY SCORE

Certificate Information

Subject
CN=fourseasoncharlotte.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 13, 2026
Valid Until
August 11, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:21:93:BF:7D:88:11:61:54:01:74:9E:A1:87:BA:99:14:AD:2A:0C:BC:C7:16:DB:72:16:CA:63:15:FC:73:2C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
brixton.it *.brixton.it *.2024.brixton.it *.admin.brixton.it *.app.brixton.it *.atelierpaulin.brixton.it *.backend.brixton.it *.metric.brixton.it *.reports.brixton.it *.superset.brixton.it *.visual.brixton.it

Other domains in certificate

bianco.studio *.bianco.studio *.neeo.bianco.studio *.www.bianco.studio
*.autoconfig.billboard.life billboard.life *.billboard.life *.cpcalendars.billboard.life *.cpcontacts.billboard.life *.mail3.billboard.life *.random.billboard.life *.webmail.billboard.life *.ww25.billboard.life
bit-side.com *.bit-side.com *.wiki.bit-side.com *.ww16.bit-side.com
*.beta.fourseasoncharlotte.com *.blog.fourseasoncharlotte.com fourseasoncharlotte.com *.fourseasoncharlotte.com *.ftp.fourseasoncharlotte.com *.img.fourseasoncharlotte.com *.kb.fourseasoncharlotte.com *.owa.fourseasoncharlotte.com *.random.fourseasoncharlotte.com *.sandbox.fourseasoncharlotte.com *.ww25.fourseasoncharlotte.com
*.aniqmail.gramail.com *.anyconnect.gramail.com *.checkin.gramail.com *.connect.gramail.com *.dliteconnect.gramail.com *.eposta.gramail.com *.exchange.gramail.com *.exchangecorp.gramail.com *.exmail2.gramail.com *.fortivpn.gramail.com *.gp-usa.gramail.com *.gpvpn.gramail.com gramail.com *.gramail.com *.hostmaster.gramail.com *.in.gramail.com *.inst.gramail.com *.login.gramail.com *.m.gramail.com *.mail.gramail.com *.mail1.gramail.com *.msexch2k13.gramail.com *.mx001.gramail.com *.mywebmail.gramail.com *.palovpn.gramail.com *.panglobal.gramail.com *.pop.gramail.com *.remoto.gramail.com *.vb.gramail.com *.vpn-perimetral.gramail.com *.webmail05.gramail.com *.ydsras.gramail.com
*.apps.justremot.co *.imap.justremot.co justremot.co *.justremot.co *.mails.justremot.co
*.b0dg9a.protectamplifyymagnet.info *.m7iang.protectamplifyymagnet.info protectamplifyymagnet.info *.protectamplifyymagnet.info
*.admin.ttkt.com *.f3.ttkt.com *.hostmaster.ttkt.com *.insight.ttkt.com *.k.ttkt.com *.ntqecnptenrw.ttkt.com ttkt.com *.ttkt.com *.ueuxqmahtatien.ttkt.com *.uwj.ttkt.com