Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=teamfor.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 18, 2026
Valid Until
May 19, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BA:D5:01:25:46:DF:03:31:41:66:98:FF:8D:80:FE:03:A2:60:1C:84:DA:50:67:B7:E8:D0:67:AE:08:33:77:FE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
marathoncard.com *.marathoncard.com *.random.marathoncard.com *.store.marathoncard.com *.wiki.marathoncard.com *.ww38.marathoncard.com

Other domains in certificate

algiz.co *.algiz.co *.magento.algiz.co *.mx.algiz.co *.remote.algiz.co *.shop.algiz.co *.staging.algiz.co *.store.algiz.co *.webconf.algiz.co *.www.algiz.co
bkpnuanellwldmkz.xyz *.bkpnuanellwldmkz.xyz *.cc2mm.bkpnuanellwldmkz.xyz *.com.bkpnuanellwldmkz.xyz *.dpfqhovt.bkpnuanellwldmkz.xyz *.log.bkpnuanellwldmkz.xyz *.mp7tf.bkpnuanellwldmkz.xyz *.pwb3b.bkpnuanellwldmkz.xyz *.qdiek.bkpnuanellwldmkz.xyz *.yhue2.bkpnuanellwldmkz.xyz
culvert.pro *.culvert.pro *.ww25.culvert.pro
*.app.dewittegids.be *.backend.dewittegids.be *.dev.dewittegids.be dewittegids.be *.dewittegids.be *.staging.dewittegids.be
*.def43e50-be6e-4725-9c21-d30f105b5694.fi68.co fi68.co *.fi68.co
*.dm4price.idanagro.com idanagro.com *.idanagro.com *.kivicare.idanagro.com *.passease.idanagro.com *.premiumhealth.idanagro.com *.traffic.idanagro.com *.www.idanagro.com
*.kwid9.md857.top md857.top *.md857.top
*.games.odinplay.net odinplay.net *.odinplay.net
officefurnitureteam.co.uk *.officefurnitureteam.co.uk
opentennis.it *.opentennis.it *.vpn.opentennis.it
*.anonbook.spawnarea.be *.immanuelnet.spawnarea.be *.immanuelweb.spawnarea.be *.projects.spawnarea.be spawnarea.be *.spawnarea.be *.store.spawnarea.be
*.admin.teamfor.it teamfor.it *.teamfor.it
*.blacked.teenlove.com *.comune.teenlove.com *.mailgw.teenlove.com *.relay.teenlove.com teenlove.com *.teenlove.com *.www-1.teenlove.com
*.autodiscover.winraz.com *.cheap.winraz.com *.cn.winraz.com *.cpcalendars.winraz.com *.cpcontacts.winraz.com *.license.winraz.com *.localhost.winraz.com *.m.winraz.com *.mail.winraz.com *.shop.winraz.com *.store.winraz.com *.wap.winraz.com *.webdisk.winraz.com winraz.com *.winraz.com *.www.winraz.com