Open
Cached
·
just now
76/100
SECURITY SCORE
Certificate Information
Subject
CN=softwaretutoriais.xyz
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 22, 2025
Valid Until
March 22, 2026
38 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B2:43:9D:3A:F2:A1:4D:BA:1B:45:39:A4:E7:0F:F2:1D:1C:71:87:FE:3B:FF:AF:5F:C6:DD:8E:74:8A:CE:1B:CA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
mercadoibre.com
*.mercadoibre.com
*.admin.mercadoibre.com
*.com.mercadoibre.com
*.org.mercadoibre.com
*.us.mercadoibre.com
*.vc.mercadoibre.com
1stchoicefacilities.co.uk
*.1stchoicefacilities.co.uk
*.ww25.1stchoicefacilities.co.uk
biquge.bio
*.biquge.bio
*.preprod-analytics.biquge.bio
*.superset.biquge.bio
*.admin.cgcovid19.in
*.center.cgcovid19.in
cgcovid19.in
*.cgcovid19.in
*.epass.cgcovid19.in
*.gwjewvpn.cgcovid19.in
*.homeisolation.cgcovid19.in
*.hospital.cgcovid19.in
*.reg.cgcovid19.in
*.test.cgcovid19.in
datatellme.com
*.datatellme.com
*.ww25.datatellme.com
domlepen-cpu.click
*.domlepen-cpu.click
*.ww25.domlepen-cpu.click
*.api.ismstruste.com
ismstruste.com
*.ismstruste.com
*.cnwww.mld168.com
mld168.com
*.mld168.com
*.ww25.mld168.com
*.ww38.mld168.com
muastudios.pl
*.muastudios.pl
*.website.muastudios.pl
netakad.com
*.netakad.com
*.app.orangeboost.xyz
orangeboost.xyz
*.orangeboost.xyz
*.a0b89db5-495e-4986-b38a-bda23691e7a1.raedesign.xyz
*.admin.raedesign.xyz
*.api.raedesign.xyz
*.app.raedesign.xyz
*.backend.raedesign.xyz
*.d.raedesign.xyz
*.dev.raedesign.xyz
raedesign.xyz
*.raedesign.xyz
*.sitemap.raedesign.xyz
*.staging.raedesign.xyz
*.ww1.raedesign.xyz
*.ww25.raedesign.xyz
*.ww7.raedesign.xyz
*.ww99.raedesign.xyz
*.www.raedesign.xyz
*.jcbotpai.redesfollows.fun
redesfollows.fun
*.redesfollows.fun
*.com.salondirectgroup.co.uk
salondirectgroup.co.uk
*.salondirectgroup.co.uk
*.test.salondirectgroup.co.uk
*.1.seiyaa-shizuoka.site
*.25.seiyaa-shizuoka.site
*.28daed5b-ff00-4f7d-b9b2-6311ffd00c3f.seiyaa-shizuoka.site
*.38.seiyaa-shizuoka.site
*.map.seiyaa-shizuoka.site
*.mta-sts.seiyaa-shizuoka.site
seiyaa-shizuoka.site
*.seiyaa-shizuoka.site
*.sitemap.seiyaa-shizuoka.site
*.sitemaps.seiyaa-shizuoka.site
*.ww1.seiyaa-shizuoka.site
*.ww25.seiyaa-shizuoka.site
*.ww38.seiyaa-shizuoka.site
softwaretutoriais.xyz
*.softwaretutoriais.xyz
*.home.theannaedit.site
theannaedit.site
*.theannaedit.site
*.mail.triel.eu
triel.eu
*.triel.eu
Other domains in certificate