Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=gushow.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 10, 2026
Valid Until
January 08, 2027
66 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
AC:E0:6B:E0:54:53:29:50:30:A1:01:12:27:0A:E1:A9:AE:10:42:78:A4:B7:11:40:45:54:4F:5F:2C:ED:A5:0C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
itstrue.it
*.itstrue.it
*.remote.itstrue.it
925-lotto.com
*.925-lotto.com
*.admin.925-lotto.com
*.assets.925-lotto.com
*.dev.925-lotto.com
*.prod.925-lotto.com
*.test.925-lotto.com
*.www.925-lotto.com
gushow.com
*.gushow.com
*.leichi.gushow.com
*.soft.gushow.com
*.ww.gushow.com
*.12.lingerie-confidential.co.uk
*.admin.lingerie-confidential.co.uk
*.analytic.lingerie-confidential.co.uk
*.analytics.lingerie-confidential.co.uk
*.api.lingerie-confidential.co.uk
*.app.lingerie-confidential.co.uk
*.cqbdri.lingerie-confidential.co.uk
*.dev.lingerie-confidential.co.uk
*.exchange.lingerie-confidential.co.uk
*.home.lingerie-confidential.co.uk
*.intelligence.lingerie-confidential.co.uk
lingerie-confidential.co.uk
*.lingerie-confidential.co.uk
*.mail.lingerie-confidential.co.uk
*.mobile.lingerie-confidential.co.uk
*.notexistsblog.lingerie-confidential.co.uk
*.outlook.lingerie-confidential.co.uk
*.owa.lingerie-confidential.co.uk
*.remote.lingerie-confidential.co.uk
*.reports.lingerie-confidential.co.uk
*.supersets.lingerie-confidential.co.uk
*.ww12.lingerie-confidential.co.uk
*.www.lingerie-confidential.co.uk
*.demo.marketable.it
marketable.it
*.marketable.it
*.notexistsbackend.marketable.it
*.remote.marketable.it
*.staging.marketable.it
mobilewap.it
*.mobilewap.it
*.remote.mobilewap.it
*.api.monokini.uk
*.backup.monokini.uk
*.correu.monokini.uk
*.landing.monokini.uk
*.mail.monokini.uk
*.mailer.monokini.uk
*.marketing.monokini.uk
monokini.uk
*.monokini.uk
*.qa.monokini.uk
*.remote.monokini.uk
*.secure.monokini.uk
*.staging.monokini.uk
*.stg.monokini.uk
*.uat.monokini.uk
*.webmail.monokini.uk
*.webvpn.monokini.uk
*.www.monokini.uk
*.backend.musicassociation.it
*.com.musicassociation.it
*.dashboard.musicassociation.it
*.demo.musicassociation.it
*.dev.musicassociation.it
*.hostmaster.musicassociation.it
musicassociation.it
*.musicassociation.it
*.mx1.musicassociation.it
*.remote.musicassociation.it
*.staging.musicassociation.it
neednow.it
*.neednow.it
*.remote.neednow.it
*.chart.personalgourmet.ca
personalgourmet.ca
*.personalgourmet.ca
*.m.pigsol.com
pigsol.com
*.pigsol.com
*.filme.starletvintage.co.uk
starletvintage.co.uk
*.starletvintage.co.uk
Other domains in certificate