Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=movimientopacto.co
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 13, 2026
Valid Until
January 11, 2027
71 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
BD:F2:A1:22:DC:71:02:8F:63:DC:F6:EA:2D:D7:01:3F:9D:8E:21:03:61:1D:EF:FD:A1:E7:0A:12:37:83:3C:19
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
mycloud.me
*.mycloud.me
amiparisjackets.us
*.amiparisjackets.us
amiparisshoes.us
*.amiparisshoes.us
amiparisskirts.us
*.amiparisskirts.us
amiparissweaters.us
*.amiparissweaters.us
amiparistops.us
*.amiparistops.us
archeetshah.info
*.archeetshah.info
baozhenzhifa.cn
*.baozhenzhifa.cn
ljfem.info
*.ljfem.info
lscci.org
*.lscci.org
luckywheel5.xyz
*.luckywheel5.xyz
lumalearning.icu
*.lumalearning.icu
macroblueinkgoport.com
*.macroblueinkgoport.com
mademe.uk
*.mademe.uk
makerassist.info
*.makerassist.info
makerwood.info
*.makerwood.info
malibufleet.info
*.malibufleet.info
malibutribeca.info
*.malibutribeca.info
manhattancash.info
*.manhattancash.info
marketmoose.com
*.marketmoose.com
marudhamalai.com
*.marudhamalai.com
maxkitchenfinance.info
*.maxkitchenfinance.info
maxlongislandflow.info
*.maxlongislandflow.info
mazjx.app
*.mazjx.app
meituantoken.info
*.meituantoken.info
metakom.xyz
*.metakom.xyz
metalbridge.info
*.metalbridge.info
metapals.net
*.metapals.net
metaphoenixasset.info
*.metaphoenixasset.info
metaphoenixincome.info
*.metaphoenixincome.info
miamibeachlift.info
*.miamibeachlift.info
movimientopacto.co
*.movimientopacto.co
*.nabi.movimientopacto.co
*.registro.movimientopacto.co
myqueensfunding.info
*.myqueensfunding.info
mystation.tv
*.mystation.tv
nexusemberautomation.com
*.nexusemberautomation.com
*.api.teslacarss.com
*.exotic.teslacarss.com
*.home.teslacarss.com
teslacarss.com
*.teslacarss.com
trocavenda.com
*.trocavenda.com
twin-twin.org
*.twin-twin.org
ukrgb.online
*.ukrgb.online
unx.gd
*.unx.gd
verginmedia.co.uk
*.verginmedia.co.uk
wbeba.app
*.wbeba.app
Other domains in certificate