SSL Certificate Analysis for dev.pilks.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Certificate Information

Subject

CN=migrafico.com

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

February 10, 2026

Valid Until

May 11, 2026 89 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

35:1B:2B:FB:A5:BA:FB:1D:58:D7:B8:BD:75:CF:9E:C4:ED:BA:3E:D3:8A:AC:8A:C0:9B:01:33:E1:12:E1:2C:E8

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

pilks.com *.pilks.com *.access.pilks.com *.admin.pilks.com *.apps.pilks.com *.cadastro.pilks.com *.cloud.pilks.com *.dev.pilks.com *.exchange.pilks.com *.gateway.pilks.com *.hostmaster.pilks.com *.mail.pilks.com *.pixel.pilks.com *.portal.pilks.com *.preview.pilks.com *.rdp.pilks.com *.rds1.pilks.com *.rdweb.pilks.com *.remote.pilks.com *.sitemap.pilks.com *.staging.pilks.com *.vpn.pilks.com *.webvpn.pilks.com *.wildcard.pilks.com *.ww1.pilks.com *.ww25.pilks.com *.ww41.pilks.com

Other domains in certificate

*.3b51b62d-8cfd-409d-8ce8-389051d9ced5.hyperdos.org *.8b3775e5-e239-48db-9985-1e17e8fe4f67.hyperdos.org *.admin.hyperdos.org *.fcd587c9-b5bf-4795-aa99-2cda30859f17.hyperdos.org *.hostmaster.hyperdos.org hyperdos.org *.hyperdos.org *.kjpdeapp.hyperdos.org *.lnzjmdemo.hyperdos.org *.members.hyperdos.org *.test.hyperdos.org *.testing.hyperdos.org

*.cloudvpn.libreriainterbook.com libreriainterbook.com *.libreriainterbook.com *.public.libreriainterbook.com *.ravpn.libreriainterbook.com *.rdweb.libreriainterbook.com *.webdisk.libreriainterbook.com *.webmail.libreriainterbook.com *.ww.libreriainterbook.com

*.4405f9f1-912d-434f-ba17-101cb3202825.lots888.com *.admin.lots888.com *.eraiuvpn.lots888.com *.fofrqapp.lots888.com *.hostmaster.lots888.com lots888.com *.lots888.com *.wexdrhostmaster.lots888.com *.wp.lots888.com

*.api.migrafico.com *.beta.migrafico.com *.demo.migrafico.com *.dev.migrafico.com migrafico.com *.migrafico.com *.sitemap.migrafico.com *.sitemaps.migrafico.com *.ww1.migrafico.com *.ww25.migrafico.com