Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mangiantini.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 11, 2026
Valid Until
May 12, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FC:35:B7:21:D9:10:F4:4F:4E:D1:EF:FD:6F:F6:01:77:CB:C3:D9:5F:3C:D4:DA:4B:85:B4:44:1A:FF:18:69:84
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
fidelity.es
*.fidelity.es
*.authsmtp.fidelity.es
*.email.fidelity.es
*.hector.fidelity.es
*.hotfix.fidelity.es
*.institutional.fidelity.es
*.lmx.fidelity.es
*.mail.fidelity.es
*.mail8.fidelity.es
*.mailserver.fidelity.es
*.marketingpro.fidelity.es
*.mbox.fidelity.es
*.mx1.fidelity.es
*.mx4.fidelity.es
*.ncheck.fidelity.es
*.professionals.fidelity.es
*.random.fidelity.es
*.remote.fidelity.es
*.secure.fidelity.es
*.server1.fidelity.es
*.smtp1.fidelity.es
*.tarjeta.fidelity.es
*.unirioja.fidelity.es
*.ww.fidelity.es
*.ww11.fidelity.es
*.ww16.fidelity.es
*.ww17.fidelity.es
*.ww25.fidelity.es
*.ww38.fidelity.es
corfu.live
*.corfu.live
*.super.corfu.live
*.ww38.corfu.live
*.cdomain.dato.it
dato.it
*.dato.it
*.globalprotect.dato.it
*.i.dato.it
*.secure.dato.it
*.vpnssl.dato.it
*.webmail05.dato.it
davidstas.com
*.davidstas.com
*.wildcard.davidstas.com
*.author.dededy.com
dededy.com
*.dededy.com
*.remote.dededy.com
*.wildcard.dededy.com
*.zcp.dededy.com
*.zwl.dededy.com
*.checkin.dkwd.com
dkwd.com
*.dkwd.com
*.login.dkwd.com
*.remoteaccess.dkwd.com
*.web.dkwd.com
enakcrot.com
*.enakcrot.com
*.ww25.enakcrot.com
fancart.shop
*.fancart.shop
glassacademy.shop
*.glassacademy.shop
*.hostmaster.mangiantini.it
mangiantini.it
*.mangiantini.it
*.api.mmyhermes.de
*.demo.mmyhermes.de
mmyhermes.de
*.mmyhermes.de
*.old.mmyhermes.de
*.lms.myvolvocarbenifits.com
myvolvocarbenifits.com
*.myvolvocarbenifits.com
*.remote.myvolvocarbenifits.com
*.crm.poshak.com
*.demo.poshak.com
*.lotus.poshak.com
*.nextaussietech.poshak.com
*.portml178.poshak.com
*.portml239.poshak.com
*.portml74.poshak.com
poshak.com
*.poshak.com
*.thakurg.poshak.com
weihnachtsfilm.de
*.weihnachtsfilm.de
Other domains in certificate