75/100 SECURITY SCORE

Certificate Information

Subject
CN=westi.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 11, 2026
Valid Until
January 09, 2027 79 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C4:8D:DE:F0:83:25:67:8E:A0:FC:9A:2C:40:F6:64:2C:F6:3D:27:F0:C7:C5:1C:DF:41:4F:40:D3:0D:DD:C3:27
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
cation.it *.cation.it *.admin.cation.it *.andpersonalappli.cation.it *.certifi.cation.it *.dashboard.cation.it *.ded.cation.it *.dentaljurisprudence.cation.it *.futuresinedu.cation.it *.intelligence.cation.it *.jurisprudence.cation.it *.mkcomun.cation.it *.mkcomuni.cation.it *.mysecondandpersonalappli.cation.it *.ofmysecondandpersonalappli.cation.it *.personalappli.cation.it *.rcsed.cation.it *.rizzoliedu.cation.it *.scomun.cation.it *.scomuni.cation.it *.secondandpersonalappli.cation.it *.sinceofmysecondandpersonalappli.cation.it *.takensinceofmysecondandpersonalappli.cation.it *.univers.cation.it *.wwww.cation.it

Other domains in certificate

arnedtolethimbevx.org *.arnedtolethimbevx.org *.bquyp.arnedtolethimbevx.org *.miklz.arnedtolethimbevx.org *.roofh.arnedtolethimbevx.org *.scqgi.arnedtolethimbevx.org *.swpvq.arnedtolethimbevx.org *.tepsn.arnedtolethimbevx.org *.tiehr.arnedtolethimbevx.org *.tzhnd.arnedtolethimbevx.org *.uppwf.arnedtolethimbevx.org *.usbvv.arnedtolethimbevx.org *.uxxvk.arnedtolethimbevx.org *.vinsf.arnedtolethimbevx.org *.vrakh.arnedtolethimbevx.org *.vtlzc.arnedtolethimbevx.org *.vvknu.arnedtolethimbevx.org *.wikjt.arnedtolethimbevx.org *.yfilp.arnedtolethimbevx.org *.zodsp.arnedtolethimbevx.org *.zpjca.arnedtolethimbevx.org
getfridsyplans.com *.getfridsyplans.com
*.admin.instagrapm.com *.analytic.instagrapm.com *.c10r.instagrapm.com *.ckcvrww25.instagrapm.com *.insights.instagrapm.com instagrapm.com *.instagrapm.com *.kf.instagrapm.com *.sitemaps.instagrapm.com *.superset.instagrapm.com *.w.instagrapm.com *.ww.instagrapm.com *.ww7w.instagrapm.com *.www.instagrapm.com
lovebags.shop *.lovebags.shop *.ww25.lovebags.shop *.ww38.lovebags.shop
*.6.pifa.net *.antispam.pifa.net *.di.pifa.net *.mail.pifa.net pifa.net *.pifa.net *.relay1.pifa.net *.ww.pifa.net *.ww38.pifa.net *.www.pifa.net
*.admin.vebo66.club *.api.vebo66.club vebo66.club *.vebo66.club *.www.vebo66.club
*.cevy.westi.com *.cnwz.westi.com westi.com *.westi.com
*.mail.xn--hrsysteme-07a.net *.trondheim.xn--hrsysteme-07a.net xn--hrsysteme-07a.net *.xn--hrsysteme-07a.net