Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=openail.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 20, 2026
Valid Until
January 18, 2027
79 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
FB:8F:66:6D:B0:B1:EC:59:4E:E2:A1:C4:94:43:95:DC:67:25:30:3F:53:8D:7D:70:C4:2F:3E:36:1C:41:57:2B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
tuttipazziperamore.com
*.tuttipazziperamore.com
*.admin.tuttipazziperamore.com
*.api.tuttipazziperamore.com
*.app.tuttipazziperamore.com
*.backend.tuttipazziperamore.com
*.blog.tuttipazziperamore.com
*.demo.tuttipazziperamore.com
*.dev.tuttipazziperamore.com
*.owa.tuttipazziperamore.com
*.staging.tuttipazziperamore.com
dancers-inc.com
*.dancers-inc.com
*.demo.dancers-inc.com
*.beta.jsud.com
*.jfq.jsud.com
jsud.com
*.jsud.com
*.marketing.jsud.com
*.mesdk.jsud.com
madmods.world
*.madmods.world
*.play.madmods.world
*.church.newlifepmi.org
*.creatorsacademy.newlifepmi.org
*.dedolph.newlifepmi.org
*.eddynice.newlifepmi.org
*.kutman.newlifepmi.org
newlifepmi.org
*.newlifepmi.org
*.pay.newlifepmi.org
*.vanjay.newlifepmi.org
*.apps.openail.com
*.chat.openail.com
openail.com
*.openail.com
phansra.co
*.phansra.co
*.random.phansra.co
*.warranty.phansra.co
*.ww25.phansra.co
piaspia.com
*.piaspia.com
*.www.piaspia.com
*.infra.searxng.biz
searxng.biz
*.searxng.biz
*.ww17.searxng.biz
sendokaimania.uk
*.sendokaimania.uk
*.ww38.sendokaimania.uk
*.online.skybrandbotai.com
*.server1.skybrandbotai.com
skybrandbotai.com
*.skybrandbotai.com
*.br-serveur.synologu.me
*.cdecdvd.synologu.me
*.daridori.synologu.me
*.delafuente.synologu.me
*.endinas.synologu.me
*.erayuan.synologu.me
*.hienter.synologu.me
*.korvo.synologu.me
*.lkwhome.synologu.me
*.lsi.synologu.me
*.n1539a.synologu.me
*.ochidoris.synologu.me
*.peropero123.synologu.me
*.pinhenglab.synologu.me
*.rtrmediaserver.synologu.me
*.sofarsocool.synologu.me
synologu.me
*.synologu.me
*.triaskoropi.synologu.me
*.uktest.synologu.me
*.webernas1520.synologu.me
*.ffffffffffff.xiaoqiangwx.org
*.m.xiaoqiangwx.org
*.mail.xiaoqiangwx.org
*.ww38.xiaoqiangwx.org
xiaoqiangwx.org
*.xiaoqiangwx.org
*.euf.yayuansoft.com
*.kg1.yayuansoft.com
*.qjk.yayuansoft.com
*.sak.yayuansoft.com
*.xlo.yayuansoft.com
yayuansoft.com
*.yayuansoft.com
Other domains in certificate