DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=appar.it
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 30, 2026
Valid Until
August 28, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:B8:33:F3:FD:8E:83:8E:D8:87:08:80:51:1A:9A:C5:CC:BC:13:43:4E:AD:40:37:9F:E9:F1:BC:90:15:75:94
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
an99.boston *.an99.boston *.autodiscover.an99.boston *.demo.an99.boston *.dev.an99.boston *.dtfzxadmin.an99.boston *.ifoicu.an99.boston *.mail.an99.boston *.marketing.an99.boston *.members.an99.boston *.rustore.an99.boston *.secure.an99.boston *.test.an99.boston *.xleihnpw.an99.boston

Other domains in certificate

*.analytics.appar.it *.app.appar.it appar.it *.appar.it *.dashs.appar.it *.mwww.appar.it *.www.appar.it
eurovia.it *.eurovia.it *.owa.eurovia.it
homeplatesf.net *.homeplatesf.net *.su.homeplatesf.net *.test.homeplatesf.net
*.api.kisauyku.org *.backup.kisauyku.org kisauyku.org *.kisauyku.org *.mail.kisauyku.org *.mailer.kisauyku.org *.marketing.kisauyku.org *.preprod.kisauyku.org *.rustore.kisauyku.org *.secure.kisauyku.org *.staging.kisauyku.org *.stg.kisauyku.org *.uat.kisauyku.org *.v1.kisauyku.org *.v2.kisauyku.org *.www.kisauyku.org
*.finna.leave.in *.i.leave.in *.ill.leave.in leave.in *.leave.in *.longer.leave.in *.nwkrtc.leave.in *.other.leave.in *.pearl.leave.in *.premium.leave.in *.puro.leave.in *.rose.leave.in *.rosemary.leave.in *.schoolpad.leave.in *.shubham.leave.in *.to.leave.in *.u.leave.in
*.3761ec00-133a-466c-ad18-92c1fb4063cc.medicopg.bet *.api.medicopg.bet *.app.medicopg.bet *.backup.medicopg.bet *.dashboard.medicopg.bet *.e0d112e7-0265-4d6a-8094-88f83f1ebb87.medicopg.bet *.mail.medicopg.bet *.mailer.medicopg.bet *.marketing.medicopg.bet medicopg.bet *.medicopg.bet *.members.medicopg.bet *.nl.medicopg.bet *.qa.medicopg.bet *.secure.medicopg.bet *.staging.medicopg.bet *.stg.medicopg.bet *.test.medicopg.bet *.uat.medicopg.bet *.v2.medicopg.bet *.web.medicopg.bet *.wenxgnew.medicopg.bet *.www.medicopg.bet
*.mail.vtvgiaitri.com vtvgiaitri.com *.vtvgiaitri.com *.wildcard.vtvgiaitri.com *.ww1.vtvgiaitri.com *.ww25.vtvgiaitri.com