76/100 SECURITY SCORE

Certificate Information

Subject
CN=planck.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 12, 2026
Valid Until
August 10, 2026 61 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
31:FC:F4:04:47:8E:A1:60:A0:13:D0:DC:C8:90:A6:F6:D3:F0:31:81:0E:2F:8E:DD:A9:EF:BB:CD:15:90:A2:42
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
exg.in *.exg.in *.hostmaster.exg.in

Other domains in certificate

blockcounseling.com *.blockcounseling.com *.www.blockcounseling.com
clickstay.reviews *.clickstay.reviews *.ww25.clickstay.reviews
*.16874.digirms.com *.api-sit4.digirms.com *.c271fe4c0b2e10543891fd2e7277d155.digirms.com *.cdn.digirms.com *.d29359fdfc4921dc7f4d642eba549705.digirms.com digirms.com *.digirms.com *.e273b4b4631a6f6e22eb40b1df2339e9.digirms.com *.ffa486a4029dee1a46c0ed19bdc4b6b7.digirms.com *.login.digirms.com *.rms.digirms.com *.srv.digirms.com *.stories.digirms.com *.ww38.digirms.com
eastmarinedrive.com *.eastmarinedrive.com *.random.eastmarinedrive.com *.www.eastmarinedrive.com
errin.com *.errin.com *.img1-fg.errin.com *.ww25.errin.com
kerwe.gdn *.kerwe.gdn
masterkeyvacations.live *.masterkeyvacations.live
max77.business *.max77.business
perthlandscapers.au *.perthlandscapers.au
pk9557.xyz *.pk9557.xyz
pk9565.xyz *.pk9565.xyz
*.hostmaster.planck.it *.mail-av.planck.it *.mail.planck.it *.media.planck.it planck.it *.planck.it *.remote.planck.it *.www.planck.it
ptnd8l.cyou *.ptnd8l.cyou
*.hostmaster.rispetta.com rispetta.com *.rispetta.com
*.32.sey.life *.abc.sey.life sey.life *.sey.life *.shop.sey.life *.staging.sey.life
*.0.wishing4you.com *.03b45396613b.wishing4you.com *.599e6d51-6db9-453c-bca8-0780de33d831.wishing4you.com *.bestbuddychallenge2021.wishing4you.com *.coh0uwebmail.wishing4you.com *.cohttfriendsquiz.wishing4you.com *.com.wishing4you.com *.coronavirus-awareness.wishing4you.com *.coronavirustest.wishing4you.com *.cpanel.wishing4you.com *.dare2020.wishing4you.com *.darechallenge.wishing4you.com *.darequiz.wishing4you.com *.dasara.wishing4you.com *.dc-fe6fa718c739.wishing4you.com *.free-pubg-skins.wishing4you.com *.friendsquiz.wishing4you.com *.i.wishing4you.com *.in.wishing4you.com *.lovecalculator.wishing4you.com *.my.wishing4you.com *.quiz.wishing4you.com *.test.wishing4you.com wishing4you.com *.wishing4you.com
*.box.zetimot.com zetimot.com *.zetimot.com