75/100 SECURITY SCORE

Certificate Information

Subject
CN=iwon207995.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 12, 2026
Valid Until
December 11, 2026 30 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
80:98:04:76:05:22:BF:83:89:E9:1E:DD:3B:01:BC:BA:87:57:CB:86:FD:10:D2:56:F2:B6:DA:DD:C9:DD:F1:A2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
nerobianco.it *.nerobianco.it *.admin.nerobianco.it *.analytics.nerobianco.it *.dashboard.nerobianco.it *.email.nerobianco.it *.intelligence.nerobianco.it *.mywebmail.nerobianco.it *.outlook.nerobianco.it *.owa.nerobianco.it *.rds.nerobianco.it *.remote.nerobianco.it *.ssl.nerobianco.it *.superset.nerobianco.it *.vdi.nerobianco.it

Other domains in certificate

42894.app *.42894.app
98135.com.cn *.98135.com.cn
accelerationexpo.com *.accelerationexpo.com *.hostmaster.accelerationexpo.com
hdrno.tv *.hdrno.tv
idebred.club *.idebred.club
investhub30-de.org *.investhub30-de.org
investhub30-deutchlend.org *.investhub30-deutchlend.org
investhub30-invest.org *.investhub30-invest.org
investhub30.org *.investhub30.org
iwon207995.com *.iwon207995.com
*.helpdesk.jabez.com jabez.com *.jabez.com
lu555.net *.lu555.net
plus.scot *.plus.scot
portwisey.xyz *.portwisey.xyz
topcasinocrown.com *.topcasinocrown.com
*.admin.trud.mobi *.app.trud.mobi *.beta.trud.mobi *.cms.trud.mobi *.console.trud.mobi *.corp.trud.mobi *.dev.trud.mobi *.docs.trud.mobi *.fresh.trud.mobi *.internal.trud.mobi *.login.trud.mobi *.portal.trud.mobi *.prod.trud.mobi *.sso.trud.mobi *.start.trud.mobi *.sync.trud.mobi trud.mobi *.trud.mobi *.us.trud.mobi *.v2.trud.mobi
*.admin.upcomingconcerts-guide-us.site *.app.upcomingconcerts-guide-us.site *.dashboard.upcomingconcerts-guide-us.site *.dev.upcomingconcerts-guide-us.site *.portal.upcomingconcerts-guide-us.site *.staging.upcomingconcerts-guide-us.site upcomingconcerts-guide-us.site *.upcomingconcerts-guide-us.site
uu888.forum *.uu888.forum
vertihotelsnewyork.com *.vertihotelsnewyork.com
w8d372yfn.cc *.w8d372yfn.cc
*.api.wholesale-tablet-rent.com *.qeddry.wholesale-tablet-rent.com wholesale-tablet-rent.com *.wholesale-tablet-rent.com
ys8899.com *.ys8899.com