Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=flowersandfruit.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 28, 2026
Valid Until
July 27, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AE:DF:A6:72:D8:93:DC:87:A3:2A:12:D2:45:7A:B1:0B:F6:C7:CB:41:FA:32:87:E5:4E:DD:3B:37:E4:8B:FA:7F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
icux.com *.icux.com *.relay1.icux.com

Other domains in certificate

allmaturepornvideos.cc *.allmaturepornvideos.cc *.www.allmaturepornvideos.cc
assistirtvgratishd.online *.assistirtvgratishd.online
bloggen.it *.bloggen.it *.superset.bloggen.it *.supersets.bloggen.it *.webmail.bloggen.it
blogist.it *.blogist.it *.hhjuhltuoccoro86qkbfgqpl54vepg.blogist.it *.hostmaster.blogist.it *.mx.blogist.it
bqad.com *.bqad.com *.lnjgg.bqad.com *.pen.bqad.com *.u.bqad.com *.y.bqad.com
flowersandfruit.it *.flowersandfruit.it *.www.flowersandfruit.it
*.api.investissementsenafrique.com *.app.investissementsenafrique.com *.dev.investissementsenafrique.com investissementsenafrique.com *.investissementsenafrique.com *.mail.investissementsenafrique.com *.members.investissementsenafrique.com *.vpn.investissementsenafrique.com *.www.investissementsenafrique.com
*.ad.pearsonevue.com *.beta.pearsonevue.com *.ci.pearsonevue.com *.demo.pearsonevue.com *.elearning.pearsonevue.com *.flowise.pearsonevue.com *.home.pearsonevue.com *.insight.pearsonevue.com pearsonevue.com *.pearsonevue.com *.pipeline.pearsonevue.com *.portfolio.pearsonevue.com *.uat.pearsonevue.com *.ww1.pearsonevue.com *.ww38.pearsonevue.com
*.co.playzion.com playzion.com *.playzion.com
*.7e80eb4b-153b-4209-9ff2-9acbc2130f4a.punjabis.org *.admin.punjabis.org *.api.punjabis.org *.app.punjabis.org *.assets.punjabis.org *.connect.punjabis.org *.demo.punjabis.org *.dev.punjabis.org *.m.punjabis.org *.ngpecfiw.punjabis.org punjabis.org *.punjabis.org *.rds.punjabis.org *.rdweb.punjabis.org *.secure.punjabis.org *.sslvpn.punjabis.org *.test.punjabis.org *.vpn.punjabis.org *.webmail.punjabis.org
skmsindia.com *.skmsindia.com *.ww38.skmsindia.com
*.32.state-warehouse-670775968.click state-warehouse-670775968.click *.state-warehouse-670775968.click
termloan.shop *.termloan.shop
tokenfinance.it *.tokenfinance.it
wuqianqa.top *.wuqianqa.top
*.jessiceshendymenservices.ze.net *.tbntdrzlinwezpp.ze.net ze.net *.ze.net