SSL Certificate Analysis for kryt.it - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=rakutensec12.com

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

April 23, 2026

Valid Until

July 22, 2026 46 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

15:69:C2:24:E0:9D:E1:4A:F6:AB:9A:37:8F:BC:BF:EA:75:34:70:16:91:B2:24:81:A5:E6:38:B8:24:55:AB:52

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

kryt.it *.kryt.it *.com.kryt.it *.hostmaster.kryt.it *.metric.kryt.it *.remote.kryt.it *.superset.kryt.it *.supersets.kryt.it *.viz.kryt.it

Other domains in certificate

*.anyconnect.commercialfinancenetwork.com *.bcnuyqdh.commercialfinancenetwork.com commercialfinancenetwork.com *.commercialfinancenetwork.com *.gateway.commercialfinancenetwork.com *.globalprotect.commercialfinancenetwork.com *.hvyirucp.commercialfinancenetwork.com *.office.commercialfinancenetwork.com

*.assets.grandpasha2312.info grandpasha2312.info *.grandpasha2312.info *.secure.grandpasha2312.info *.staging.grandpasha2312.info

*.08cbf123-9543-4313-a3c3-5cc01ee8bad2.jolretzy.com *.3g.jolretzy.com *.47f39353-1600-4abf-95e8-7c78a5387e89.jolretzy.com *.8b3862e1-bac6-4326-92cb-e4a7a611d250.jolretzy.com *.admin.jolretzy.com *.app.jolretzy.com *.backup.jolretzy.com *.btfesassets.jolretzy.com *.cloud.jolretzy.com *.comune.jolretzy.com *.dashboard.jolretzy.com *.dns.jolretzy.com *.info.jolretzy.com *.jimsvqrb.jolretzy.com jolretzy.com *.jolretzy.com *.lsvitmailin.jolretzy.com *.mail.jolretzy.com *.mailer.jolretzy.com *.mailin.jolretzy.com *.mx20.jolretzy.com *.mx3.jolretzy.com *.new.jolretzy.com *.panel.jolretzy.com *.rd.jolretzy.com *.rds.jolretzy.com *.server.jolretzy.com *.sitemap.jolretzy.com *.stg.jolretzy.com *.uat.jolretzy.com *.webmail.jolretzy.com *.wp.jolretzy.com

*.4yj7f.marketinggold54.top *.adm.marketinggold54.top *.admin.marketinggold54.top *.aowpq.marketinggold54.top *.api.marketinggold54.top *.es.marketinggold54.top marketinggold54.top *.marketinggold54.top *.mb3-4a74-b198-bb0050b44c27.marketinggold54.top *.pochta.marketinggold54.top *.pochtabank.marketinggold54.top *.qhaigpfk.marketinggold54.top *.sberbank.marketinggold54.top *.sbermarket.marketinggold54.top *.voepzadmin.marketinggold54.top

*.32.rakutensec12.com rakutensec12.com *.rakutensec12.com