DNS Gurus
Cached · 2h ago
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=stato.it
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 06, 2026
Valid Until
February 04, 2027 87 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
D3:9B:6C:3E:9A:5B:1C:5B:B9:1D:B7:AC:E2:CA:A0:66:6D:6C:CD:64:6D:42:21:8E:6A:FC:AE:5F:31:A2:E9:B3
Alternative Names
87 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
dref.it *.dref.it *.cpanel.dref.it *.email.dref.it *.frpavwebmail.dref.it *.hostmaster.dref.it *.imap2.dref.it *.imap4.dref.it *.mail.dref.it *.mx.dref.it *.pop3.dref.it *.remote.dref.it *.webdisk.dref.it *.webmail.dref.it *.www.dref.it

Other domains in certificate

*.7.fer.au *.admin.fer.au *.build.fer.au *.bun.fer.au *.buon.fer.au *.checkout.fer.au *.cheir.fer.au *.cous.fer.au *.emv1.fer.au *.et.fer.au *.f.fer.au fer.au *.fer.au *.ha.fer.au *.induc.fer.au *.intranet.fer.au *.l.fer.au *.ledige.fer.au *.notexiststo.fer.au *.notexistsww38.fer.au *.pou.fer.au *.sa.fer.au
*.home.kfz-steuer-online.de kfz-steuer-online.de *.kfz-steuer-online.de *.staging1.kfz-steuer-online.de *.staging3.kfz-steuer-online.de *.staging4.kfz-steuer-online.de *.test.kfz-steuer-online.de
*.archivi.stato.it *.archivio.stato.it *.archiviodistatoricerca.stato.it *.avvocatura.stato.it *.c1.stato.it *.centralesdello.stato.it *.commissariatodipsolionline.stato.it *.coniazioni.stato.it *.consiglio.stato.it *.di.stato.it *.dj.stato.it *.fielmann.stato.it *.generale.stato.it *.interno.stato.it *.milanocitta.stato.it *.ni.stato.it *.passaportoonlinepolizia.stato.it *.policia.stato.it *.polizadi.stato.it *.polizia.stato.it *.poliziad.stato.it *.poliziadi.stato.it *.poliziae.stato.it *.random.stato.it *.staging.stato.it stato.it *.stato.it *.www.stato.it *.zecca.stato.it
*.4142a39d-23de-4be0-861d-8e64f832d5b1.xn--srsq0mhl.com *.api.xn--srsq0mhl.com *.demo.xn--srsq0mhl.com *.ekb.xn--srsq0mhl.com *.gitlab.xn--srsq0mhl.com *.ra.xn--srsq0mhl.com *.remoteapp.xn--srsq0mhl.com *.rxfyxbjg.xn--srsq0mhl.com *.ssl.xn--srsq0mhl.com *.store.xn--srsq0mhl.com *.ts.xn--srsq0mhl.com *.wap.xn--srsq0mhl.com xn--srsq0mhl.com *.xn--srsq0mhl.com