76/100 SECURITY SCORE

Certificate Information

Subject
CN=mystrip.vip
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 28, 2026
Valid Until
August 26, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
87:C7:06:70:54:9D:62:C9:4F:AA:AD:21:40:8A:FA:DF:FA:B8:5F:20:FE:EF:64:8E:E8:3F:BE:05:AC:02:74:05
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
photooftheday.it *.photooftheday.it *.admin.photooftheday.it *.api.photooftheday.it *.backend.photooftheday.it *.dev.photooftheday.it *.sandbox.photooftheday.it

Other domains in certificate

*.72od66.an99.net an99.net *.an99.net *.auth.an99.net *.cdn.an99.net *.ts.an99.net
*.api.artifacts.bot *.app.artifacts.bot artifacts.bot *.artifacts.bot *.demo.artifacts.bot *.dev.artifacts.bot *.m.artifacts.bot *.staging.artifacts.bot *.test.artifacts.bot
budz.in *.budz.in *.store.budz.in *.webmail.budz.in
*.comwww.expressgaragedoorsolutionsofbocaraton.xyz expressgaragedoorsolutionsofbocaraton.xyz *.expressgaragedoorsolutionsofbocaraton.xyz
*.analytic.findwine.club *.api.findwine.club *.backup.findwine.club *.emv1.findwine.club findwine.club *.findwine.club *.insight-qa.findwine.club *.news.findwine.club *.remote.findwine.club *.rtslnlacfbzzujnwugomv1.findwine.club
*.0afmf.lava5008.xyz *.1846m.lava5008.xyz *.4yj7f.lava5008.xyz *.817b1634-c593-4bf4-9bd8-37e13b925ff1.lava5008.xyz *.backup.lava5008.xyz *.fcvkr.lava5008.xyz *.fdb74.lava5008.xyz *.g89kw.lava5008.xyz *.kwid9.lava5008.xyz lava5008.xyz *.lava5008.xyz *.marketing.lava5008.xyz *.niw2v.lava5008.xyz *.q2s8t.lava5008.xyz *.qa.lava5008.xyz *.stg.lava5008.xyz *.zfjqqmarketing.lava5008.xyz
*.api.mystrip.vip *.dashboard.mystrip.vip *.dev.mystrip.vip mystrip.vip *.mystrip.vip *.notexistsbroadcast-ip.mystrip.vip *.reporting.mystrip.vip *.vip.mystrip.vip
*.innlzh.pay77.casino pay77.casino *.pay77.casino *.sberbank.pay77.casino *.sbermegamarket.pay77.casino
*.demo.performance.bet *.development.performance.bet performance.bet *.performance.bet *.ww38.performance.bet
*.0ubwb7.sherpaequityfund.biz *.4gh5mk.sherpaequityfund.biz *.96id9b.sherpaequityfund.biz *.admin.sherpaequityfund.biz *.api.sherpaequityfund.biz *.app.sherpaequityfund.biz *.assets.sherpaequityfund.biz *.backup.sherpaequityfund.biz *.demo.sherpaequityfund.biz *.dev.sherpaequityfund.biz *.mail.sherpaequityfund.biz sherpaequityfund.biz *.sherpaequityfund.biz
*.rdp.xn--ruq814hgcb912d.com xn--ruq814hgcb912d.com *.xn--ruq814hgcb912d.com