Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=controlroom.us
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 16, 2026
Valid Until
August 14, 2026
80 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
57:1D:96:4E:E3:27:32:08:70:4C:39:70:54:AE:08:4F:E8:98:7B:F1:F8:E2:D2:42:6C:EF:A0:BA:4B:97:57:18
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
omxmo.com
*.omxmo.com
*.m.omxmo.com
*.www.omxmo.com
controlroom.us
*.controlroom.us
liveoddsnow.com
*.liveoddsnow.com
*.m.liveoddsnow.com
*.www.liveoddsnow.com
*.a.marchal-photography.com
*.b7873e75-9ab5-41a7-992d-2c64db3adf53.marchal-photography.com
*.cloud.marchal-photography.com
*.mail.marchal-photography.com
marchal-photography.com
*.marchal-photography.com
*.mobile.marchal-photography.com
*.nieuw.marchal-photography.com
*.rd.marchal-photography.com
*.rdweb.marchal-photography.com
*.sitemap.marchal-photography.com
*.www.marchal-photography.com
*.12.markepromoinnovieren.com
*.admin.markepromoinnovieren.com
*.app.markepromoinnovieren.com
*.argoworkflows.markepromoinnovieren.com
*.ci.markepromoinnovieren.com
*.dash.markepromoinnovieren.com
*.demo-cicd.markepromoinnovieren.com
*.dev.markepromoinnovieren.com
*.home.markepromoinnovieren.com
*.hotfix-cicd.markepromoinnovieren.com
*.integration-ci.markepromoinnovieren.com
*.itemap.markepromoinnovieren.com
*.jenkins.markepromoinnovieren.com
markepromoinnovieren.com
*.markepromoinnovieren.com
*.preprod.markepromoinnovieren.com
*.test.markepromoinnovieren.com
microelectronics.in
*.microelectronics.in
*.rdweb.microelectronics.in
*.m.ogrocery.com
*.mx.ogrocery.com
ogrocery.com
*.ogrocery.com
*.www.ogrocery.com
*.dan.promotiondaily.com
*.hostmaster.promotiondaily.com
*.indonesia.promotiondaily.com
*.m.promotiondaily.com
*.malaysia.promotiondaily.com
*.mx4.promotiondaily.com
*.mx5.promotiondaily.com
*.philippines.promotiondaily.com
promotiondaily.com
*.promotiondaily.com
*.singapore.promotiondaily.com
*.thailand.promotiondaily.com
*.www.promotiondaily.com
*.m.real-art.com
real-art.com
*.real-art.com
*.www.real-art.com
*.login.repelisgo.co
repelisgo.co
*.repelisgo.co
*.sitemap.repelisgo.co
*.m.sculpttechnology.com
sculpttechnology.com
*.sculpttechnology.com
*.www.sculpttechnology.com
*.connectvpn.serras.com
*.gateway.serras.com
*.m.serras.com
*.office.serras.com
*.remoteaccess.serras.com
serras.com
*.serras.com
*.web.serras.com
*.webconnect.serras.com
*.webvpn.serras.com
*.www.serras.com
*.cloud.xn--mcty9co56e.com
*.news.xn--mcty9co56e.com
*.rds.xn--mcty9co56e.com
*.rdweb.xn--mcty9co56e.com
*.remote.xn--mcty9co56e.com
xn--mcty9co56e.com
*.xn--mcty9co56e.com
Other domains in certificate