Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=saatchis.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 25, 2026
Valid Until
January 23, 2027
78 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
DE:A3:B1:59:20:AA:6D:67:81:14:F2:09:B6:8C:85:FB:A4:BD:83:81:25:3F:70:55:4E:BB:AD:E1:3B:4B:1D:EC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
fleo.org
*.fleo.org
cuppabot.info
*.cuppabot.info
desk-os.com
*.desk-os.com
*.admin.dreamstyle.online
dreamstyle.online
*.dreamstyle.online
*.ww16.dreamstyle.online
*.32.fortcv.com
*.eu.fortcv.com
fortcv.com
*.fortcv.com
*.api.gigatorrent.org
*.etchwffffffffffff.gigatorrent.org
*.ffffffffffff.gigatorrent.org
gigatorrent.org
*.gigatorrent.org
*.ns2.gigatorrent.org
*.ww12.gigatorrent.org
*.ww7.gigatorrent.org
*.mx.npmr.org
npmr.org
*.npmr.org
*.32.saatchis.com
*.advan.saatchis.com
*.app.saatchis.com
*.cit.saatchis.com
*.dev.saatchis.com
*.dms.saatchis.com
*.faq.saatchis.com
*.hostmaster.saatchis.com
*.internal.saatchis.com
*.joomla.saatchis.com
*.mail.saatchis.com
*.mailhost.saatchis.com
*.mailserver.saatchis.com
*.ns2.saatchis.com
*.portal.saatchis.com
saatchis.com
*.saatchis.com
*.smtp1.saatchis.com
*.staging.saatchis.com
*.volgograd.saatchis.com
*.ww17.saatchis.com
*.ww25.saatchis.com
*.ww38.saatchis.com
*.www.saatchis.com
*.zmml.saatchis.com
*.b.ss-metal.com.cn
*.bswbiu.ss-metal.com.cn
*.cxz.ss-metal.com.cn
*.dbo.ss-metal.com.cn
*.faprkk.ss-metal.com.cn
*.fdkc.ss-metal.com.cn
*.fpc.ss-metal.com.cn
*.hmjm.ss-metal.com.cn
*.hyb.ss-metal.com.cn
*.if.ss-metal.com.cn
*.igck.ss-metal.com.cn
*.lai.ss-metal.com.cn
*.lqf.ss-metal.com.cn
*.nshlz.ss-metal.com.cn
*.olmi.ss-metal.com.cn
*.q.ss-metal.com.cn
*.qlw.ss-metal.com.cn
*.qr.ss-metal.com.cn
*.share.ss-metal.com.cn
ss-metal.com.cn
*.ss-metal.com.cn
*.sx.ss-metal.com.cn
*.sz.ss-metal.com.cn
*.tyx.ss-metal.com.cn
*.ubs.ss-metal.com.cn
*.ujoe.ss-metal.com.cn
*.v.ss-metal.com.cn
*.wapb7.ss-metal.com.cn
*.wm.ss-metal.com.cn
*.zdxfbq.ss-metal.com.cn
*.8.xiu11335s.cc
xiu11335s.cc
*.xiu11335s.cc
*.8.xiu11338s.cc
xiu11338s.cc
*.xiu11338s.cc
*.8.xiu1366d.cc
*.portal.xiu1366d.cc
xiu1366d.cc
*.xiu1366d.cc
Other domains in certificate