76/100 SECURITY SCORE

Certificate Information

Subject
CN=voyeurweb.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 22, 2026
Valid Until
July 21, 2026 50 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
49:7C:AA:92:23:0D:36:B1:54:B0:E7:F0:E0:7C:9F:D5:63:94:6E:A7:F6:33:67:2D:56:35:54:BB:35:94:4F:C7
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
voyeurweb.it *.voyeurweb.it *.analytic.voyeurweb.it *.blog.voyeurweb.it *.hostmaster.voyeurweb.it *.intelligence.voyeurweb.it *.mail.voyeurweb.it *.reporting.voyeurweb.it *.rkyehnnvqrhostmaster.voyeurweb.it *.superset.voyeurweb.it *.supersets.voyeurweb.it *.webmail.voyeurweb.it

Other domains in certificate

*.an.smrld.cn *.bjj.smrld.cn *.bk.smrld.cn *.bxa.smrld.cn *.czjr.smrld.cn *.ddr.smrld.cn *.dfd.smrld.cn *.diy.smrld.cn *.djs.smrld.cn *.dv.smrld.cn *.ewa.smrld.cn *.ezvx.smrld.cn *.fbpj.smrld.cn *.g.smrld.cn *.hlee.smrld.cn *.ic.smrld.cn *.jaol.smrld.cn *.jgd.smrld.cn *.ks.smrld.cn *.kswq.smrld.cn *.kz.smrld.cn *.kzzm.smrld.cn *.lvu.smrld.cn *.msl.smrld.cn *.mu.smrld.cn *.nmyi.smrld.cn *.nxj.smrld.cn *.oho.smrld.cn *.oq.smrld.cn *.oue.smrld.cn *.qg.smrld.cn *.rrmf.smrld.cn *.rv.smrld.cn *.rw.smrld.cn *.sa.smrld.cn *.sapm.smrld.cn *.sar.smrld.cn *.se.smrld.cn *.sitemaps.smrld.cn *.skq.smrld.cn smrld.cn *.smrld.cn *.t.smrld.cn *.uj.smrld.cn *.url.smrld.cn *.ux.smrld.cn *.wrn.smrld.cn *.wu.smrld.cn *.wz.smrld.cn *.yms.smrld.cn *.yq.smrld.cn *.ys.smrld.cn *.zjph.smrld.cn *.zzgb.smrld.cn
symeizi.com *.symeizi.com *.www.symeizi.com
*.admin.xn--w6j.lol *.app.xn--w6j.lol *.backend.xn--w6j.lol *.cart-dev.xn--w6j.lol *.demo.xn--w6j.lol *.documentation.xn--w6j.lol *.forums.xn--w6j.lol *.health.xn--w6j.lol *.images.xn--w6j.lol *.mssql.xn--w6j.lol *.news.xn--w6j.lol *.node.xn--w6j.lol *.payment.xn--w6j.lol *.pop.xn--w6j.lol *.proof.xn--w6j.lol *.sandbox.xn--w6j.lol *.staging.xn--w6j.lol *.subscribe.xn--w6j.lol xn--w6j.lol *.xn--w6j.lol