Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=universoflix.life
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 26, 2026
Valid Until
August 24, 2026
76 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
52:85:E5:80:8C:09:1F:98:BB:80:EB:19:67:45:36:F3:30:61:20:05:66:C8:88:61:20:0F:D1:95:EC:DC:00:E3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
burial.vip
*.burial.vip
*.comune.burial.vip
ashleysnaturals.com
*.ashleysnaturals.com
*.exchange.ashleysnaturals.com
*.owa.ashleysnaturals.com
*.zimbra.ashleysnaturals.com
*.app.asinetwork.org
asinetwork.org
*.asinetwork.org
*.dev.asinetwork.org
*.home.asinetwork.org
*.m.asinetwork.org
*.news.asinetwork.org
*.wap.asinetwork.org
*.web.asinetwork.org
*.wildcard.asinetwork.org
*.www.asinetwork.org
championium.xyz
*.championium.xyz
*.ww38.championium.xyz
javloanluan.xyz
*.javloanluan.xyz
*.mail.javloanluan.xyz
kkta.com
*.kkta.com
moviesfd.cc
*.moviesfd.cc
*.ww1.moviesfd.cc
*.1.piensamatematik.com
*.api.piensamatematik.com
*.app.piensamatematik.com
*.backend.piensamatematik.com
*.cpcalendars.piensamatematik.com
*.demo.piensamatematik.com
*.life.piensamatematik.com
*.mail.piensamatematik.com
piensamatematik.com
*.piensamatematik.com
*.staging.piensamatematik.com
*.webmail.piensamatematik.com
*.ww1.piensamatematik.com
*.ww7.piensamatematik.com
*.www.piensamatematik.com
*.admin-api.radioday.fm
*.admin.radioday.fm
*.ai.radioday.fm
*.api-test.radioday.fm
*.api.radioday.fm
*.api2.radioday.fm
*.apis.radioday.fm
*.assets.radioday.fm
*.bfqde2023llsplde12qd27qdl.radioday.fm
*.bfuogstaging.radioday.fm
*.blog.radioday.fm
*.buyer-api.radioday.fm
*.cdn-3.radioday.fm
*.cloud.radioday.fm
*.common-api.radioday.fm
*.config.radioday.fm
*.demo.radioday.fm
*.erp.radioday.fm
*.hbicumtsbxm.radioday.fm
*.iot.radioday.fm
*.kgpxzrlmzziot.radioday.fm
*.koalccdn-4.radioday.fm
*.mtsbxm.radioday.fm
*.openapi.radioday.fm
*.portal.radioday.fm
*.prepros.radioday.fm
*.prod.radioday.fm
*.qa.radioday.fm
radioday.fm
*.radioday.fm
*.repositorio.radioday.fm
*.search.radioday.fm
*.services.radioday.fm
*.sitemaps.radioday.fm
*.springboot.radioday.fm
*.user.radioday.fm
*.voice.radioday.fm
*.widget.radioday.fm
*.ww01.radioday.fm
*.xcx.radioday.fm
*.xonlsauth.radioday.fm
*.random.universoflix.life
universoflix.life
*.universoflix.life
*.ww25.universoflix.life
Other domains in certificate