Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=dyal.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 07, 2026
Valid Until
May 08, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FC:C6:E5:1A:90:13:C7:C0:F4:2B:88:71:CF:11:B8:58:1C:49:AB:D4:A8:EC:E2:2C:A7:10:E5:39:02:4B:6B:DE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
dyal.it *.dyal.it *.dashboard.dyal.it

Other domains in certificate

22224ph.com *.22224ph.com
381y.cc *.381y.cc *.www.381y.cc
5rhfu4.com *.5rhfu4.com
adverzpro.com *.adverzpro.com
afiihijabgallery.com *.afiihijabgallery.com
afr-journal.com *.afr-journal.com
akamaiserver.com *.akamaiserver.com
allsafety.it *.allsafety.it *.cloud.allsafety.it
*.api.attentions.it attentions.it *.attentions.it
augelli.com *.augelli.com *.demo.augelli.com *.m.augelli.com *.wiki.augelli.com *.ww16.augelli.com
bitplanes.io *.bitplanes.io
compilazione.com *.compilazione.com *.dev.compilazione.com
cswsteamcommunity.com *.cswsteamcommunity.com
*.ar.damned.it damned.it *.damned.it
diara.com *.diara.com *.vdi.diara.com
*.config.goedkopeverzekeringen.net goedkopeverzekeringen.net *.goedkopeverzekeringen.net
koreanbeautylab.click *.koreanbeautylab.click *.staging.koreanbeautylab.click *.ww25.koreanbeautylab.click
*.adblock.lawfare.bond *.adguard01.lawfare.bond *.doh.lawfare.bond lawfare.bond *.lawfare.bond *.ldrjtshop.lawfare.bond *.new.lawfare.bond *.shop.lawfare.bond
*.ipv6.les-lundis-daltor.com les-lundis-daltor.com *.les-lundis-daltor.com *.www.les-lundis-daltor.com
movieswatch.to *.movieswatch.to *.ww16.movieswatch.to *.ww25.movieswatch.to *.ww38.movieswatch.to
personal-design.it *.personal-design.it *.ra-vpn.personal-design.it
seuvinho.online *.seuvinho.online *.vps-5021539.seuvinho.online
*.assets.shreerudravaastu.in shreerudravaastu.in *.shreerudravaastu.in *.webmail.shreerudravaastu.in
*.exchange.sima.it *.pop.sima.it sima.it *.sima.it
*.dashs.telline.it telline.it *.telline.it
*.keodtmx.thebiba.com thebiba.com *.thebiba.com
*.superset.yourbusinesspartner.it yourbusinesspartner.it *.yourbusinesspartner.it