Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=flexovit.pro
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 28, 2026
Valid Until
April 28, 2026
64 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
24:69:07:DD:99:F6:9A:C0:85:85:C9:11:84:FF:DD:FA:B8:1B:60:C0:D6:B3:03:BD:EB:05:ED:47:EC:B4:3A:ED
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
magicapps.me
*.magicapps.me
*.ww25.magicapps.me
amazonforce.org
*.amazonforce.org
*.shop.amazonforce.org
*.store.amazonforce.org
americanhard.org
*.americanhard.org
*.pay.americanhard.org
*.ardocd.basdiehub.com
basdiehub.com
*.basdiehub.com
*.m.basdiehub.com
*.ww1.basdiehub.com
*.ww16.basdiehub.com
*.ww2.basdiehub.com
*.ww6.basdiehub.com
*.autodiscover.fisicacbc.org
*.avellaneda.fisicacbc.org
*.ciudad.fisicacbc.org
*.docentes.fisicacbc.org
fisicacbc.org
*.fisicacbc.org
*.lasheras.fisicacbc.org
*.oeste.fisicacbc.org
*.owa.fisicacbc.org
*.paternal.fisicacbc.org
*.wp.fisicacbc.org
flexovit.pro
*.flexovit.pro
*.aminiya.hausanews.com
*.arsenal.hausanews.com
*.b.hausanews.com
*.bbc.hausanews.com
*.bcc.hausanews.com
*.cdcfib.hausanews.com
*.dw.hausanews.com
hausanews.com
*.hausanews.com
*.iran.hausanews.com
*.kanywood.hausanews.com
*.legit.hausanews.com
*.nigeria.hausanews.com
*.w.hausanews.com
*.ww3.hausanews.com
*.www.hausanews.com
*.clickfunnels.learnbaseballhitting.com
*.cpcalendars.learnbaseballhitting.com
*.cpcontacts.learnbaseballhitting.com
*.dev.learnbaseballhitting.com
*.learnbas.learnbaseballhitting.com
learnbaseballhitting.com
*.learnbaseballhitting.com
*.localonlineadsnow.learnbaseballhitting.com
*.mybeautyschoolconnection.learnbaseballhitting.com
*.proreson.learnbaseballhitting.com
*.sitemap.learnbaseballhitting.com
*.webmail.learnbaseballhitting.com
mahamanthanmantavyanews.com
*.mahamanthanmantavyanews.com
*.webmail.mahamanthanmantavyanews.com
*.br.premiosjequiti.online
*.online.premiosjequiti.online
premiosjequiti.online
*.premiosjequiti.online
*.site.premiosjequiti.online
*.ww38.premiosjequiti.online
*.mackeeper.rtp.services
rtp.services
*.rtp.services
*.ww38.rtp.services
siyahfilmizle.bio
*.siyahfilmizle.bio
*.ww7.siyahfilmizle.bio
*.localhost.starweslay.com
*.smtp.starweslay.com
starweslay.com
*.starweslay.com
*.webdisk.starweslay.com
*.3vpp0cg.telefontamirparca.xyz
*.4prgttof.telefontamirparca.xyz
*.5knq55w.telefontamirparca.xyz
*.6vcv7eqy.telefontamirparca.xyz
*.i9db1z8x.telefontamirparca.xyz
*.ibqjzp26.telefontamirparca.xyz
*.mail.telefontamirparca.xyz
*.phodt2fh.telefontamirparca.xyz
telefontamirparca.xyz
*.telefontamirparca.xyz
Other domains in certificate