Open
Cached
·
just now
79/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=cofin.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 03, 2026
Valid Until
May 04, 2026
80 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:5C:3C:D9:75:5E:3C:0A:05:CC:1C:9F:E5:41:1B:CF:76:82:B9:44:D2:8E:96:7A:CE:AA:7B:56:19:49:E3:6A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
comflare.com
*.comflare.com
*.it.comflare.com
cofin.it
*.cofin.it
comborangers.com
*.comborangers.com
comello.it
*.comello.it
commune.it
*.commune.it
conducts.it
*.conducts.it
consulentedelrisparmio.it
*.consulentedelrisparmio.it
consumption.it
*.consumption.it
corporateventure.it
*.corporateventure.it
critichiamo.it
*.critichiamo.it
crmsystem.it
*.crmsystem.it
crunching.it
*.crunching.it
daddone.it
*.daddone.it
darel.it
*.darel.it
datainfo.it
*.datainfo.it
daybet.it
*.daybet.it
daytaplus.com
*.daytaplus.com
decoratingtips.it
*.decoratingtips.it
decuplo.it
*.decuplo.it
delhiinstituteoflaw.in
*.delhiinstituteoflaw.in
delly.it
*.delly.it
dendo.it
*.dendo.it
dentalmarket.it
*.dentalmarket.it
desangre.it
*.desangre.it
dfhkxchgxdu.cc
*.dfhkxchgxdu.cc
digitalmedialab.it
*.digitalmedialab.it
dioro.it
*.dioro.it
dioses.it
*.dioses.it
dovepro.it
*.dovepro.it
dudes.it
*.dudes.it
dunes.it
*.dunes.it
dyal.it
*.dyal.it
dzp18.top
*.dzp18.top
eastwick.it
*.eastwick.it
ecer.it
*.ecer.it
ehosqz.gdn
*.ehosqz.gdn
ellibromolamas.com
*.ellibromolamas.com
elpais.it
*.elpais.it
emergencysurgery.it
*.emergencysurgery.it
emite.it
*.emite.it
emore.it
*.emore.it
energysale.it
*.energysale.it
energytea.it
*.energytea.it
funpoliceinc.com
*.funpoliceinc.com
Other domains in certificate