Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=hotelo.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 14, 2026
Valid Until
May 15, 2026
83 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E7:9F:74:A3:DE:26:81:77:19:F9:1C:7D:96:C3:8B:C7:C3:C1:AC:9A:94:F3:CC:8C:67:C3:4A:53:96:F1:DD:0A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
hotelo.it
*.hotelo.it
*.dash.hotelo.it
*.46dd1e8a-2578-4604-bbdd-0a516164d71e.ben54.bet
ben54.bet
*.ben54.bet
*.ww38.ben54.bet
*.ad.esports.boston
*.adg.esports.boston
*.adguard.esports.boston
*.doh.esports.boston
*.doh1.esports.boston
esports.boston
*.esports.boston
*.www.esports.boston
*.eqpnnww25.graphene.es
graphene.es
*.graphene.es
*.mail.graphene.es
*.ww38.graphene.es
*.admin.kitumusote.org
*.beta.kitumusote.org
*.bfqde2023llsplde12qd27qdl.kitumusote.org
*.blog.kitumusote.org
*.bxlfiomada.kitumusote.org
*.cloud.kitumusote.org
*.crm.kitumusote.org
*.demo.kitumusote.org
*.early.kitumusote.org
*.ftp.kitumusote.org
kitumusote.org
*.kitumusote.org
*.mail.kitumusote.org
*.mail2.kitumusote.org
*.mall.kitumusote.org
*.saas.kitumusote.org
*.score.kitumusote.org
*.shop.kitumusote.org
*.sitemap.kitumusote.org
*.sitemaps.kitumusote.org
*.springboot.kitumusote.org
*.staging.kitumusote.org
*.storage.kitumusote.org
*.widget.kitumusote.org
*.wildcard.kitumusote.org
*.ww38.kitumusote.org
*.www70.kitumusote.org
*.wx.kitumusote.org
*.m.mangfalltal.com
mangfalltal.com
*.mangfalltal.com
*.www.mangfalltal.com
*.m.nagacuan10.click
nagacuan10.click
*.nagacuan10.click
*.50facbd1d86cd73ebdeb9bb1559b2a59.nturafol.com
*.abc.nturafol.com
*.api.nturafol.com
*.comune.nturafol.com
*.hostmaster.nturafol.com
*.kf.nturafol.com
*.magento.nturafol.com
*.mail.nturafol.com
nturafol.com
*.nturafol.com
*.shop.nturafol.com
*.staging.nturafol.com
*.superset.nturafol.com
*.ww25.nturafol.com
*.www.nturafol.com
nyypost.com
*.nyypost.com
*.ww16.nyypost.com
*.img.scenexe3.io
scenexe3.io
*.scenexe3.io
tamildhoollll.cc
*.tamildhoollll.cc
*.ww1.tamildhoollll.cc
*.ww25.tamildhoollll.cc
*.ww3.tamildhoollll.cc
taxithainguyen24h.vip
*.taxithainguyen24h.vip
*.vip.taxithainguyen24h.vip
tylerfergersonre.com
*.tylerfergersonre.com
*.css.watchxxxfree.pw
*.mta-sts.watchxxxfree.pw
watchxxxfree.pw
*.watchxxxfree.pw
Other domains in certificate