Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=searies801.top
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 27, 2026
Valid Until
July 26, 2026 59 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AD:A4:4F:1A:3B:2F:E0:B3:6B:E4:0D:E7:A5:8A:E1:DD:96:73:2E:0D:FD:05:CA:15:E8:F2:FE:FA:FC:72:DE:04
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
mechatronic.it *.mechatronic.it *.dashboard.mechatronic.it *.reports.mechatronic.it

Other domains in certificate

*.a.freeantar.com freeantar.com *.freeantar.com
*.admin.gardenvalueinnovation.live *.demo.gardenvalueinnovation.live *.dev.gardenvalueinnovation.live gardenvalueinnovation.live *.gardenvalueinnovation.live *.uyfphuzvgldev.gardenvalueinnovation.live *.www.gardenvalueinnovation.live
*.123.gokdom.com *.ask.gokdom.com *.dzjt.gokdom.com gokdom.com *.gokdom.com *.temp.gokdom.com *.ww38.gokdom.com
*.admin.ragazzagiovane.com *.analytic.ragazzagiovane.com *.api.ragazzagiovane.com *.backend.ragazzagiovane.com *.bbs.ragazzagiovane.com *.dashboard.ragazzagiovane.com *.demo.ragazzagiovane.com *.metrics.ragazzagiovane.com ragazzagiovane.com *.ragazzagiovane.com *.reporting.ragazzagiovane.com *.staging.ragazzagiovane.com *.superset.ragazzagiovane.com *.supersets.ragazzagiovane.com *.workflow.ragazzagiovane.com *.ww42.ragazzagiovane.com
*.api-test.searies801.top *.blog.searies801.top *.confluence.searies801.top *.connect.searies801.top *.cpcontacts.searies801.top *.domaincontroller.searies801.top *.help.searies801.top *.hr.searies801.top *.mailgate.searies801.top *.mx02.searies801.top *.net.searies801.top *.new.searies801.top *.personal.searies801.top searies801.top *.searies801.top *.tunnel.searies801.top *.upload.searies801.top *.web3.searies801.top *.windows.searies801.top
*.60538018-8cc8-4903-86a7-8b2bb5f607f5.sfvogstrain.com *.6dcac582-cf61-43cf-beee-1dbc761181a6.sfvogstrain.com *.6efaf437-7685-42f0-9081-7f852aba11c7.sfvogstrain.com *.a.sfvogstrain.com *.admin.sfvogstrain.com *.api.sfvogstrain.com *.app.sfvogstrain.com *.assets.sfvogstrain.com *.azure1.sfvogstrain.com *.b95f3e19-b186-4517-b231-f862780ef8bd.sfvogstrain.com *.console.sfvogstrain.com *.demo.sfvogstrain.com *.desktops.sfvogstrain.com *.dev.sfvogstrain.com *.mail.sfvogstrain.com *.myapps2.sfvogstrain.com *.portal2.sfvogstrain.com sfvogstrain.com *.sfvogstrain.com *.smtps.sfvogstrain.com *.spam.sfvogstrain.com *.test.sfvogstrain.com *.unitymail.sfvogstrain.com *.vpn-portal.sfvogstrain.com *.zimbra.sfvogstrain.com
*.autoconfig.sky-rocket.pro *.book.sky-rocket.pro *.demo.sky-rocket.pro *.gpt.sky-rocket.pro *.my.sky-rocket.pro sky-rocket.pro *.sky-rocket.pro *.test.sky-rocket.pro