Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=servicecar.it
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 16, 2026
Valid Until
January 14, 2027
74 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
7E:73:C5:62:4F:6D:4E:65:49:B8:5E:AD:67:46:FA:B8:D2:0B:AE:D0:BB:05:E7:24:A5:21:FF:E5:7C:5B:5B:F4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
70 domains
servicecar.it
*.servicecar.it
*.analytic.servicecar.it
*.analytics.servicecar.it
*.api.servicecar.it
*.app.servicecar.it
*.imap.servicecar.it
*.imap4.servicecar.it
*.remote.servicecar.it
*.staging.servicecar.it
*.uat.servicecar.it
*.vip.servicecar.it
*.webmail.servicecar.it
*.www.servicecar.it
068618.cn
*.068618.cn
aviatorjacketwomen.org
*.aviatorjacketwomen.org
awaqa.com
*.awaqa.com
eviro-by.com
*.eviro-by.com
funbags.uk
*.funbags.uk
*.test.funbags.uk
*.bitshack.it-support.com.au
*.cloudbthosting.it-support.com.au
*.concordnetnet.it-support.com.au
*.httpswww.it-support.com.au
it-support.com.au
*.it-support.com.au
*.peterle.it-support.com.au
*.exchange.kamloopshyundai.com
*.intelligence.kamloopshyundai.com
kamloopshyundai.com
*.kamloopshyundai.com
*.mail04.kamloopshyundai.com
*.mobile.kamloopshyundai.com
*.redash.kamloopshyundai.com
*.sitemaps.kamloopshyundai.com
kfinkart.com
*.kfinkart.com
lw6qnty.my
www.lw6qnty.my
makecove.com
*.makecove.com
myreadinngmanga.info
*.myreadinngmanga.info
*.ww1.myreadinngmanga.info
odmmtk2.my
www.odmmtk2.my
oneplus-agency.sg
www.oneplus-agency.sg
*.edu.rufflecon.org
*.hosting.rufflecon.org
*.my.rufflecon.org
rufflecon.org
*.rufflecon.org
*.schedule.rufflecon.org
*.server.rufflecon.org
*.tlaqocpcalendars.rufflecon.org
sale-transaction.icu
www.sale-transaction.icu
salik-pays.shop
www.salik-pays.shop
*.elite.smartlogistics.space
smartlogistics.space
*.smartlogistics.space
*.storage.smartlogistics.space
*.truckstar.smartlogistics.space
Other domains in certificate