Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=darkcloud.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 04, 2026
Valid Until
July 03, 2026 70 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:E2:27:DB:D0:F3:BE:BF:BF:A4:48:B2:86:75:BB:1A:B6:7E:72:A3:CD:99:C6:8B:8C:17:20:72:18:07:9E:CA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
aab.net *.aab.net *.0jb.aab.net *.7zapm-3ksl.aab.net *.9j8g.aab.net *.biznap.aab.net *.dagma.aab.net *.egk.aab.net *.ffg.aab.net *.ghi.aab.net *.hao.aab.net *.j58.aab.net *.jar.aab.net *.klmm.aab.net *.mixo.aab.net *.mptx.aab.net *.npqr.aab.net *.nullmx.aab.net *.ob4.aab.net *.ooze6d.aab.net *.pr1.aab.net *.pruu.aab.net *.suluinjau.aab.net *.thm.aab.net *.uqbg.aab.net *.webmail.aab.net *.ww38.aab.net *.xxac.aab.net *.yandex.aab.net

Other domains in certificate

78winc2.ltd *.78winc2.ltd *.dev.78winc2.ltd *.docs.78winc2.ltd *.external.78winc2.ltd
caoxxx.cc *.caoxxx.cc *.cn.caoxxx.cc *.co.caoxxx.cc *.com.caoxxx.cc *.come.caoxxx.cc *.coom.caoxxx.cc *.lc.caoxxx.cc *.live.caoxxx.cc *.lub.caoxxx.cc *.me.caoxxx.cc *.org.caoxxx.cc *.tc.caoxxx.cc *.tv.caoxxx.cc *.vip.caoxxx.cc *.work.caoxxx.cc *.wp.caoxxx.cc *.xyz.caoxxx.cc
*.be.darkcloud.it *.benl.darkcloud.it *.bi.darkcloud.it *.conkeror.darkcloud.it *.csq.darkcloud.it darkcloud.it *.darkcloud.it *.eu-west-1.darkcloud.it *.gtm-ext.darkcloud.it *.hydronet.darkcloud.it *.in.darkcloud.it *.no.darkcloud.it *.prod.darkcloud.it *.qa-dahaiyisiicin.darkcloud.it *.retours.darkcloud.it *.ru.darkcloud.it *.sandbox.darkcloud.it *.scan.darkcloud.it *.se.darkcloud.it *.search-completed.darkcloud.it *.seninhikayen.darkcloud.it *.staging-loveyourlocal.darkcloud.it *.testscoring01.darkcloud.it *.usrouterb.darkcloud.it
*.asmaa.saied.com *.ci.saied.com *.dr.saied.com *.jenkins.saied.com *.jiuyi.saied.com *.m.saied.com *.mba.saied.com *.mohamed.saied.com *.nl.saied.com *.pipeline.saied.com saied.com *.saied.com *.sandbox.saied.com *.sh.saied.com