Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sportingstore.it
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
November 03, 2026
Valid Until
February 01, 2027
77 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
D0:DC:62:29:D4:B1:37:76:FA:7A:2A:0B:0E:18:9A:54:1E:E9:E8:4C:67:4A:B3:09:89:52:42:9B:18:D3:A9:A5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
yaba.it
*.yaba.it
*.admin.yaba.it
*.autoconfig.yaba.it
*.bi.yaba.it
*.bigdata.yaba.it
*.correu.yaba.it
*.dashboard.yaba.it
*.dashs.yaba.it
*.data.yaba.it
*.demo.yaba.it
*.eposta.yaba.it
*.ex02.yaba.it
*.exchange.yaba.it
*.exchangecorp.yaba.it
*.exmail2.yaba.it
*.hostmaster.yaba.it
*.imap.yaba.it
*.intel.yaba.it
*.intelligence.yaba.it
*.mail.yaba.it
*.mail1.yaba.it
*.mymail.yaba.it
*.notexistsadmin.yaba.it
*.notexistsrds.yaba.it
*.ogrencieposta.yaba.it
*.outlook.yaba.it
*.owa.yaba.it
*.rds.yaba.it
*.remote.yaba.it
*.smtpa.yaba.it
*.superset.yaba.it
*.1998love.belogfa.com
*.amifa.belogfa.com
*.amirmirkhodaeeii.belogfa.com
*.argena.belogfa.com
belogfa.com
*.belogfa.com
*.cabinmagic.belogfa.com
*.delaram71.belogfa.com
*.gedaei.belogfa.com
*.gtm.belogfa.com
*.hamed.belogfa.com
*.hiva333.belogfa.com
*.iranwetland.belogfa.com
*.jak.belogfa.com
*.khairmuhammad.belogfa.com
*.kish2000.belogfa.com
*.maedehshirzad.belogfa.com
*.mamadona.belogfa.com
*.masjedamir.belogfa.com
*.mohadeseh80.belogfa.com
*.mohammad.belogfa.com
*.mohsenomahta.belogfa.com
*.myvoicem.belogfa.com
*.pooya9.belogfa.com
*.rapsoal.belogfa.com
*.sagheye-gandom.belogfa.com
*.saharasgharyan.belogfa.com
*.sepidehniloo.belogfa.com
*.sh-bazaresham.belogfa.com
*.sokut-tanhaei.belogfa.com
*.tafakoreziba.belogfa.com
*.addressed.observations.it
*.admin.observations.it
*.answers.observations.it
*.app.observations.it
*.bohurborod.observations.it
*.conditions.observations.it
*.dashboard.observations.it
*.demo.observations.it
*.hostmaster.observations.it
*.hurborod.observations.it
*.intelligence.observations.it
*.iv.observations.it
*.labour.observations.it
*.metric.observations.it
observations.it
*.observations.it
*.observations.observations.it
*.recovery.observations.it
*.remote.observations.it
*.theevening.observations.it
*.www.observations.it
*.hostmaster.sportingstore.it
*.login.sportingstore.it
*.mail.sportingstore.it
sportingstore.it
*.sportingstore.it
*.www.sportingstore.it
Other domains in certificate