76/100 SECURITY SCORE

Certificate Information

Subject
CN=empresarias.digital
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 03, 2026
Valid Until
August 01, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1A:E4:F2:55:1F:14:6B:BF:68:FB:7E:26:3B:53:D5:08:FD:B9:FB:91:82:73:BF:7B:D6:35:24:6B:EC:3C:F5:ED
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
verizonqireless.com *.verizonqireless.com *.citrix.verizonqireless.com *.cloudmail.verizonqireless.com *.eas.verizonqireless.com *.mobile.verizonqireless.com

Other domains in certificate

7234tom.com *.7234tom.com
*.33-179-91.adinet.net adinet.net *.adinet.net *.random.adinet.net *.webnext.adinet.net *.ww25.adinet.net
arudi.de *.arudi.de *.mail.arudi.de
asialivealternatif.info *.asialivealternatif.info *.www.asialivealternatif.info
*.agate.atfpros.com *.app1.atfpros.com *.aq.atfpros.com atfpros.com *.atfpros.com *.bcg-rds01.atfpros.com *.cloud.atfpros.com *.desktops.atfpros.com *.erkplek.atfpros.com *.fs3.atfpros.com *.mhclxtys.atfpros.com *.portail.atfpros.com *.rd-gw.atfpros.com *.rdswa.atfpros.com *.rdweb.atfpros.com *.ts02.atfpros.com
*.beta.catamaran.studio catamaran.studio *.catamaran.studio
cliphotvn.life *.cliphotvn.life *.ww38.cliphotvn.life
clubsuccess.com *.clubsuccess.com *.www.clubsuccess.com
*.api.empresarias.digital *.bk.empresarias.digital empresarias.digital *.empresarias.digital
*.fashion.harpag.com harpag.com *.harpag.com *.tech.harpag.com
homesecure360.com *.homesecure360.com *.ww25.homesecure360.com *.ww38.homesecure360.com
*.digestivehlth.inax.it inax.it *.inax.it *.serviziweb.inax.it *.staging.inax.it
*.ftp.khogiasi247.com khogiasi247.com *.khogiasi247.com *.ww38.khogiasi247.com *.www.khogiasi247.com
mypreciousstone.com *.mypreciousstone.com *.rz.mypreciousstone.com
pubclip.fr *.pubclip.fr *.random.pubclip.fr *.ww17.pubclip.fr
s-mpr.com *.s-mpr.com
tradehere.com.au *.tradehere.com.au *.ww25.tradehere.com.au *.ww38.tradehere.com.au
*.dns.triumphfood.com *.hostmaster.triumphfood.com *.mx7.triumphfood.com triumphfood.com *.triumphfood.com *.ww25.triumphfood.com *.ww38.triumphfood.com
*.admin.xextop1.net xextop1.net *.xextop1.net