Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=ilgiurista.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026
85 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
17:82:5C:D0:A7:3C:D7:B7:21:00:C4:20:5B:B6:5A:3C:F4:72:43:0E:9E:BA:D5:13:6A:D5:59:6C:46:CE:23:4D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
lecirque.it
*.lecirque.it
iblock.it
*.iblock.it
idealname.xyz
*.idealname.xyz
ilgiurista.it
*.ilgiurista.it
ilsfzu.pro
*.ilsfzu.pro
incheon-legal-794842165.click
*.incheon-legal-794842165.click
industrializedmachinery.com
*.industrializedmachinery.com
influjoy.top
*.influjoy.top
innovativefoodsoul.food
*.innovativefoodsoul.food
intestini.it
*.intestini.it
ispo.ca
*.ispo.ca
istanbuleliteescorts.com
*.istanbuleliteescorts.com
ivbet.love
*.ivbet.love
jeleveux.it
*.jeleveux.it
jiancaishop.cn
*.jiancaishop.cn
jredgroup.com
*.jredgroup.com
kemba.it
*.kemba.it
keyman.it
*.keyman.it
kidceptional.com
*.kidceptional.com
kiina.it
*.kiina.it
kindkanconcepts.com
*.kindkanconcepts.com
kldax.pro
*.kldax.pro
kupitprava14.top
*.kupitprava14.top
kygo.it
*.kygo.it
l4l.it
*.l4l.it
landscape-services-de-pango.click
*.landscape-services-de-pango.click
lasertoner.it
*.lasertoner.it
lavash.it
*.lavash.it
lesperluette-en-scene.com
*.lesperluette-en-scene.com
lfnyw.pro
*.lfnyw.pro
liabilities.it
*.liabilities.it
lidos.it
*.lidos.it
linklink.it
*.linklink.it
linkvip79o.win
*.linkvip79o.win
litaliaincucina.it
*.litaliaincucina.it
livedelivery.it
*.livedelivery.it
lte-broadcast-alliance.com
*.lte-broadcast-alliance.com
lurl.it
*.lurl.it
luxuriousdestination.com
*.luxuriousdestination.com
luxuryhotelsvenice.it
*.luxuryhotelsvenice.it
lvobet.college
*.lvobet.college
magnifi.it
*.magnifi.it
makam.it
*.makam.it
makery.it
*.makery.it
mangaworld.me
*.mangaworld.me
Other domains in certificate