Open
Cached
·
just now
91/100
SECURITY SCORE
Certificate Information
Subject
CN=bicarz.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 10, 2025
Valid Until
March 10, 2026
71 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:7A:03:18:62:F3:7B:2C:9E:13:A9:0C:B9:B4:35:32:DC:69:B6:F1:24:04:6B:F4:18:A6:24:E8:F9:F2:E9:C8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
default-src; connect-src; img-src; +5 more
default-src 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com platform.instagram.com platform.twitter.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com platform.instagram.com platform.twitter.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' app.mailjet.com tools.eurolandir.com unpkg.com *.qualtrics.com js-agent.newrelic.com *.nr-data.net px.ads.linkedin.com *.doubleclick.net *.googleadservices.com p.adsymptotic.com *.google.com *.google.co.in sdk.companywebcast.com pr.globenewswire.com *.miningchemicalshandbook.com live.staticflickr.com *.flickr.com *.buzzsprout.com t.co analytics.twitter.com *.youtube.com *.addthis.com z.moatads.com v1.addthisedge.com *.solvay.com *.syensqo.com *.googletagmanager.com *.googleapis.com data: cdn.jsdelivr.net npmcdn.com cdnjs.cloudflare.com www.google-analytics.com *.pardot.com js-cdn.dynatrace.com api.ipify.org api.ipgeolocation.io *.clarity.ms snap.licdn.com static.ads-twitter.com connect.facebook.net up.pixel.ad fonts.gstatic.com *.w3.org *.facebook.com pixel.sitescout.com vara-services.com www.gstatic.com *.linkedin.com *.bing.com catalog.ides.com view-awesome-table.com tags.srv.stackadapt.com *.gcs-web.com tools.euroland.com cdn.cookielaw.org static.addtoany.com noembed.com solvay.keepeek.com fonts.syensqo.com cdn.linkedin.oribi.io *.firebaseapp.com *.appspot.com i.ytimg.com pagead2.googlesyndication.com region1.google-analytics.com geolocation.onetrust.com privacyportal-de.onetrust.com https://x3oqy.mjt.lu content.syensqo.com content2.syensqo.com assets6.keepeek.com media.syensqo.com syensqo.keepeek.com https://syensqo.piwik.pro https://syensqo.containers.piwik.pro *.lfeeder.com *.leadfeeder.com; report-uri https://www.e2p2l.com/en/system/reporting/csp_violation; report-to csp_violation
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
11 domains
e2p2l.com
bicarz.com
inerti-toscana.it
www.inerti-toscana.it
rhodia.ru
www.rhodia.ru
sodasolvay.it
www.sodasolvay.it
solvairsolutions.com
solvay.com
solvayinfo.com
Other domains in certificate