Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=personalchef.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:21:09:CD:E7:1F:5A:F8:58:9B:48:43:D1:CF:17:37:95:73:15:C4:C4:08:4F:77:7C:20:B0:C2:E1:44:E6:E5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
installvirus.com
*.installvirus.com
auto-25.biz
*.auto-25.biz
*.shop.auto-25.biz
bf168.co
*.bf168.co
*.www.bf168.co
bikeitbarnstaple.co.uk
*.bikeitbarnstaple.co.uk
*.bikeshed.bikeitbarnstaple.co.uk
*.bikeshedbike.bikeitbarnstaple.co.uk
*.electricbikesdevon.bikeitbarnstaple.co.uk
*.152.birthcheck.com
*.186.birthcheck.com
*.about.birthcheck.com
*.app1.birthcheck.com
*.archive.birthcheck.com
birthcheck.com
*.birthcheck.com
*.box.birthcheck.com
*.comune.birthcheck.com
*.demo.birthcheck.com
*.ea.birthcheck.com
*.fj.birthcheck.com
*.mailer.birthcheck.com
*.photos.birthcheck.com
*.press.birthcheck.com
*.random.birthcheck.com
*.ro.birthcheck.com
*.sports.birthcheck.com
*.static.birthcheck.com
*.users.birthcheck.com
*.web01.birthcheck.com
cfbsection.com
*.cfbsection.com
*.comune.cfbsection.com
*.americanexpress.creditworldaustralia.com
*.api.creditworldaustralia.com
*.autoconfig.creditworldaustralia.com
*.beta.creditworldaustralia.com
*.chatwoot.creditworldaustralia.com
creditworldaustralia.com
*.creditworldaustralia.com
*.sitemap.creditworldaustralia.com
*.webdisk.creditworldaustralia.com
*.www.creditworldaustralia.com
fatsak.co.za
*.fatsak.co.za
*.api.hillsart.com
*.crm.hillsart.com
*.demo.hillsart.com
*.dev.hillsart.com
*.forum.hillsart.com
hillsart.com
*.hillsart.com
*.hostmaster.hillsart.com
*.mail.hillsart.com
*.vpn.hillsart.com
*.ww1.hillsart.com
*.ww17.hillsart.com
*.ww25.hillsart.com
*.ww38.hillsart.com
malltoolz.xyz
*.malltoolz.xyz
*.rczhl.malltoolz.xyz
*.hostmaster.personalchef.it
personalchef.it
*.personalchef.it
*.2fwww.raidcalendar.com
*.fwww.raidcalendar.com
raidcalendar.com
*.raidcalendar.com
*.ww25.raidcalendar.com
*.ww7.raidcalendar.com
*.download.smiggle.mobi
*.gh.smiggle.mobi
*.loki.smiggle.mobi
*.m.smiggle.mobi
*.prelive.smiggle.mobi
smiggle.mobi
*.smiggle.mobi
*.hostmaster.vadavone.de
vadavone.de
*.vadavone.de
*.app.xo68.fun
*.intranet.xo68.fun
*.portal.xo68.fun
xo68.fun
*.xo68.fun
Other domains in certificate