Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=westi.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 11, 2026
Valid Until
January 09, 2027
79 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C4:8D:DE:F0:83:25:67:8E:A0:FC:9A:2C:40:F6:64:2C:F6:3D:27:F0:C7:C5:1C:DF:41:4F:40:D3:0D:DD:C3:27
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
cation.it
*.cation.it
*.admin.cation.it
*.andpersonalappli.cation.it
*.certifi.cation.it
*.dashboard.cation.it
*.ded.cation.it
*.dentaljurisprudence.cation.it
*.futuresinedu.cation.it
*.intelligence.cation.it
*.jurisprudence.cation.it
*.mkcomun.cation.it
*.mkcomuni.cation.it
*.mysecondandpersonalappli.cation.it
*.ofmysecondandpersonalappli.cation.it
*.personalappli.cation.it
*.rcsed.cation.it
*.rizzoliedu.cation.it
*.scomun.cation.it
*.scomuni.cation.it
*.secondandpersonalappli.cation.it
*.sinceofmysecondandpersonalappli.cation.it
*.takensinceofmysecondandpersonalappli.cation.it
*.univers.cation.it
*.wwww.cation.it
arnedtolethimbevx.org
*.arnedtolethimbevx.org
*.bquyp.arnedtolethimbevx.org
*.miklz.arnedtolethimbevx.org
*.roofh.arnedtolethimbevx.org
*.scqgi.arnedtolethimbevx.org
*.swpvq.arnedtolethimbevx.org
*.tepsn.arnedtolethimbevx.org
*.tiehr.arnedtolethimbevx.org
*.tzhnd.arnedtolethimbevx.org
*.uppwf.arnedtolethimbevx.org
*.usbvv.arnedtolethimbevx.org
*.uxxvk.arnedtolethimbevx.org
*.vinsf.arnedtolethimbevx.org
*.vrakh.arnedtolethimbevx.org
*.vtlzc.arnedtolethimbevx.org
*.vvknu.arnedtolethimbevx.org
*.wikjt.arnedtolethimbevx.org
*.yfilp.arnedtolethimbevx.org
*.zodsp.arnedtolethimbevx.org
*.zpjca.arnedtolethimbevx.org
getfridsyplans.com
*.getfridsyplans.com
*.admin.instagrapm.com
*.analytic.instagrapm.com
*.c10r.instagrapm.com
*.ckcvrww25.instagrapm.com
*.insights.instagrapm.com
instagrapm.com
*.instagrapm.com
*.kf.instagrapm.com
*.sitemaps.instagrapm.com
*.superset.instagrapm.com
*.w.instagrapm.com
*.ww.instagrapm.com
*.ww7w.instagrapm.com
*.www.instagrapm.com
lovebags.shop
*.lovebags.shop
*.ww25.lovebags.shop
*.ww38.lovebags.shop
*.6.pifa.net
*.antispam.pifa.net
*.di.pifa.net
*.mail.pifa.net
pifa.net
*.pifa.net
*.relay1.pifa.net
*.ww.pifa.net
*.ww38.pifa.net
*.www.pifa.net
*.admin.vebo66.club
*.api.vebo66.club
vebo66.club
*.vebo66.club
*.www.vebo66.club
*.cevy.westi.com
*.cnwz.westi.com
westi.com
*.westi.com
*.mail.xn--hrsysteme-07a.net
*.trondheim.xn--hrsysteme-07a.net
xn--hrsysteme-07a.net
*.xn--hrsysteme-07a.net
Other domains in certificate