Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=miclock.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 25, 2026
Valid Until
July 24, 2026
51 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9A:B1:56:C3:E1:F0:C1:9C:0A:7D:EC:56:07:7C:71:5D:84:DB:61:15:7A:34:DB:C4:EE:E0:CC:35:BA:38:CD:A5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
streamstore.net
*.streamstore.net
*.cloud.streamstore.net
*.plus.streamstore.net
*.support.streamstore.net
*.ww38.streamstore.net
ayami.com
*.ayami.com
*.foto.ayami.com
*.kob.ayami.com
*.random.ayami.com
*.rss.ayami.com
*.secure.ayami.com
*.temp.ayami.com
*.wordpress.ayami.com
bombu.com
*.bombu.com
*.dev.bombu.com
*.tr.bombu.com
*.users.bombu.com
*.vpn.bombu.com
*.www.bombu.com
*.yuuuxdesktop.bombu.com
*.comune.danielcano.com
danielcano.com
*.danielcano.com
*.hostmaster.danielcano.com
*.mail.danielcano.com
flickenroll.com
*.flickenroll.com
*.app.kenkun.com
kenkun.com
*.kenkun.com
*.ufa.kenkun.com
*.hostmaster.komunikacija.com
komunikacija.com
*.komunikacija.com
*.users.komunikacija.com
*.ww25.komunikacija.com
kridayindia.in
*.kridayindia.in
*.api.miclock.com
*.billing.miclock.com
*.m.miclock.com
miclock.com
*.miclock.com
*.s.miclock.com
*.test.miclock.com
*.elpeter.panita.com
*.email.panita.com
*.mas.panita.com
*.mi.panita.com
panita.com
*.panita.com
*.secureaccess.panita.com
*.users.panita.com
*.ww17.panita.com
*.app.peregrinacion.com
*.jenkins.peregrinacion.com
peregrinacion.com
*.peregrinacion.com
*.prod.peregrinacion.com
*.school.peregrinacion.com
*.aa8b8034-19c6-4e9e-8980-6c55ad53a671.rrhvx.la
*.admin.rrhvx.la
*.api.rrhvx.la
*.app.rrhvx.la
*.assets.rrhvx.la
*.demo.rrhvx.la
*.dev.rrhvx.la
*.fd1174f2-ddfb-4239-aa27-64308da0aa90.rrhvx.la
*.hostmaster.rrhvx.la
rrhvx.la
*.rrhvx.la
*.test.rrhvx.la
*.wdjfthostmaster.rrhvx.la
*.bbb.sharkguias.com
*.ccc.sharkguias.com
*.nnn.sharkguias.com
sharkguias.com
*.sharkguias.com
*.ww25.sharkguias.com
*.www.sharkguias.com
*.zzz.sharkguias.com
*.api2.synaesthesie.net
*.backend.synaesthesie.net
synaesthesie.net
*.synaesthesie.net
tyrbotax.com
*.tyrbotax.com
Other domains in certificate