76/100 SECURITY SCORE

Certificate Information

Subject
CN=satellite.in
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 12, 2026
Valid Until
August 10, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E3:CD:0B:EA:B9:93:0A:EF:B4:16:70:46:99:E7:DF:AF:65:6C:DD:6C:EE:E3:70:95:D3:EC:F6:68:D3:2B:90:48
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
1vinyukle.net *.1vinyukle.net *.a832a3d4-635f-4cde-b5f2-b764098d72e2.1vinyukle.net *.api.1vinyukle.net *.app.1vinyukle.net *.demo.1vinyukle.net *.dev.1vinyukle.net *.dizqishare.1vinyukle.net *.external.1vinyukle.net *.intranet.1vinyukle.net *.my.1vinyukle.net *.portal.1vinyukle.net *.public.1vinyukle.net *.sharepoint.1vinyukle.net

Other domains in certificate

apartment-rentals-r.click *.apartment-rentals-r.click
aqmc.loan *.aqmc.loan
axw2n681mgsji5b.top *.axw2n681mgsji5b.top
bfstbuy.com *.bfstbuy.com *.hostmaster.bfstbuy.com *.mail.bfstbuy.com *.xh7ajy.bfstbuy.com
*.2958698.fghhik.xyz *.9350926.fghhik.xyz *.d.fghhik.xyz *.ebwif.fghhik.xyz fghhik.xyz *.fghhik.xyz *.krhcdd.fghhik.xyz *.kwid9.fghhik.xyz *.q2s8t.fghhik.xyz *.s5kjz.fghhik.xyz *.yhue2.fghhik.xyz
*.5b05ade5-9b9c-422c-9279-6b4b60b89a5e.ginsengperfume.com *.a.ginsengperfume.com *.aaa.ginsengperfume.com *.api.ginsengperfume.com *.app.ginsengperfume.com *.backup.ginsengperfume.com *.biqzgfla.ginsengperfume.com *.chat.ginsengperfume.com *.cloud.ginsengperfume.com *.dashboard.ginsengperfume.com *.db0237fd-724c-4e01-bb92-0c475bb3d800.ginsengperfume.com *.dev.ginsengperfume.com ginsengperfume.com *.ginsengperfume.com *.intel.ginsengperfume.com *.mail.ginsengperfume.com *.mailer.ginsengperfume.com *.marketing.ginsengperfume.com *.mx10.ginsengperfume.com *.posta.ginsengperfume.com *.postmaster.ginsengperfume.com *.qa.ginsengperfume.com *.rd.ginsengperfume.com *.rdweb.ginsengperfume.com *.remote.ginsengperfume.com *.secure.ginsengperfume.com *.stg.ginsengperfume.com *.vdi.ginsengperfume.com *.webmail.ginsengperfume.com *.wiki.ginsengperfume.com *.www.ginsengperfume.com
*.admin.gon88.me *.api.gon88.me *.app.gon88.me *.b4428f40-c052-4c33-b368-f4a743765acc.gon88.me *.demo.gon88.me *.dev.gon88.me gon88.me *.gon88.me *.test.gon88.me *.www.gon88.me
*.3450informations-payupodate.iwkaitalia.art iwkaitalia.art *.iwkaitalia.art *.shrink.iwkaitalia.art
leon-zerkalo-bp60u.xyz *.leon-zerkalo-bp60u.xyz
*.beerpigshop.ovdc.xyz *.niggastore.ovdc.xyz ovdc.xyz *.ovdc.xyz
*.digital.satellite.in satellite.in *.satellite.in