Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=universoflix.life
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 26, 2026
Valid Until
August 24, 2026 76 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
52:85:E5:80:8C:09:1F:98:BB:80:EB:19:67:45:36:F3:30:61:20:05:66:C8:88:61:20:0F:D1:95:EC:DC:00:E3
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
burial.vip *.burial.vip *.comune.burial.vip

Other domains in certificate

ashleysnaturals.com *.ashleysnaturals.com *.exchange.ashleysnaturals.com *.owa.ashleysnaturals.com *.zimbra.ashleysnaturals.com
*.app.asinetwork.org asinetwork.org *.asinetwork.org *.dev.asinetwork.org *.home.asinetwork.org *.m.asinetwork.org *.news.asinetwork.org *.wap.asinetwork.org *.web.asinetwork.org *.wildcard.asinetwork.org *.www.asinetwork.org
championium.xyz *.championium.xyz *.ww38.championium.xyz
javloanluan.xyz *.javloanluan.xyz *.mail.javloanluan.xyz
kkta.com *.kkta.com
moviesfd.cc *.moviesfd.cc *.ww1.moviesfd.cc
*.1.piensamatematik.com *.api.piensamatematik.com *.app.piensamatematik.com *.backend.piensamatematik.com *.cpcalendars.piensamatematik.com *.demo.piensamatematik.com *.life.piensamatematik.com *.mail.piensamatematik.com piensamatematik.com *.piensamatematik.com *.staging.piensamatematik.com *.webmail.piensamatematik.com *.ww1.piensamatematik.com *.ww7.piensamatematik.com *.www.piensamatematik.com
*.admin-api.radioday.fm *.admin.radioday.fm *.ai.radioday.fm *.api-test.radioday.fm *.api.radioday.fm *.api2.radioday.fm *.apis.radioday.fm *.assets.radioday.fm *.bfqde2023llsplde12qd27qdl.radioday.fm *.bfuogstaging.radioday.fm *.blog.radioday.fm *.buyer-api.radioday.fm *.cdn-3.radioday.fm *.cloud.radioday.fm *.common-api.radioday.fm *.config.radioday.fm *.demo.radioday.fm *.erp.radioday.fm *.hbicumtsbxm.radioday.fm *.iot.radioday.fm *.kgpxzrlmzziot.radioday.fm *.koalccdn-4.radioday.fm *.mtsbxm.radioday.fm *.openapi.radioday.fm *.portal.radioday.fm *.prepros.radioday.fm *.prod.radioday.fm *.qa.radioday.fm radioday.fm *.radioday.fm *.repositorio.radioday.fm *.search.radioday.fm *.services.radioday.fm *.sitemaps.radioday.fm *.springboot.radioday.fm *.user.radioday.fm *.voice.radioday.fm *.widget.radioday.fm *.ww01.radioday.fm *.xcx.radioday.fm *.xonlsauth.radioday.fm
*.random.universoflix.life universoflix.life *.universoflix.life *.ww25.universoflix.life