Open
Cached
·
just now
75/100
SECURITY SCORE
Certificate Information
Subject
CN=ik.imagekit.io
Issuer
C=US, O=Let's Encrypt, CN=E8
Valid From
January 01, 2026
Valid Until
April 01, 2026
77 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
5B:5D:15:D9:0B:51:7F:BC:1B:D3:B3:C1:3E:D4:93:A0:10:ED:08:DF:5B:C6:2F:28:E9:9E:1B:42:2B:E6:20:C7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.1
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
Warnings
- • TLS 1.1 is deprecated and should be disabled
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
81 domains
media.brate.com
storage.100asa.com
images.agrizone.net
img.alissa.se
assets.appfabrikken.no
cdn.authentik.com
pictures.automedia.de
cdn.banklesstimes.com
images.bemini.be
media.betmgm.co.uk
cdn.binalogue.com
img.bit5.com
cdn.bitfortex.com
media.careerfairy.io
images.collctiv.com
media3.coming-home.com
images.crestahotels.com
cdn.cryptomonday.de
images.deadgoodundies.com
assets.deal.nl
media.deal.nl
images.deinhandy.de
img-cdn.financeunlocked.com
images.finerylondon.com
img.fotofy.nl
images.gdn-ingatlan.hu
cdn.greenpanda.io
image.gymlib.com
images.hawesandcurtis.com
assets.heatable.co.uk
ik.imagekit.io
img.investingoal.com
imgd.investingoal.com
img.investingoal.de
img.investingoal.es
img.investingoal.it
img.investingoal.nl
cdn-img.jeroenbeekman.nl
product-img.jeroenbeekman.nl
ca.junedesk-edge.com
assets.kiko.homes
cdn.lead-studio.com
img.lead-studio.com
images.lemonadefashion.com
img.lenso.ai
3pmedia.leroymerlin.co.za
media.leroymerlin.co.za
img.liveaboard.com
images.lovetovisit.com
images.lubexcel.com
ik.lumentric.com
images.manouvellevoiture.com
sf1.cdn.medel.com
assets.mer.eco
media.met-helmets.com
img.mirka.com
cdn.moneytransfers.com
cdn.moneyzine.com
productimages.motatos.com
cdn1.neovapo.com
images.newloc.fr
asset.nobiadigital.com
assets.orenda.finance
imgkit.otelz.com
images.platekompaniet.no
cdn.productfocus.com
medias.rencontres-digitales-franchise.fr
medias.rencontres-digitales-retailservices.fr
img.restaurantsbrighton.co.uk
images.robethood.net
cdn.solosholidays.co.uk
images.spin.co.uk
img.spysystem.dk
media.takeadesk.com
img.thedjcompany.eu
media.thr.net
static.urbnups.app
cdn.watski.com
mediakit.webleistung.com
img-cdn.xunlocked.com
media.zielonamapa.pl
Other domains in certificate