75/100 SECURITY SCORE

Certificate Information

Subject
CN=rockettreats.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 27, 2026
Valid Until
December 26, 2026 66 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
6A:65:A7:D4:7C:77:CD:14:0F:BB:D2:11:72:27:BD:3A:2C:A1:94:BC:14:2E:79:1D:A1:88:CE:82:BF:51:C0:97
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
praso.it *.praso.it *.hostmaster.praso.it *.notexistsportalegiovani.praso.it *.notexistsprovincia.praso.it *.portalegiovani.praso.it *.provincia.praso.it *.remote.praso.it *.www.praso.it

Other domains in certificate

467.me *.467.me *.kpd.467.me
*.2mubjyr01m0s0htc.adidas-es.biz adidas-es.biz *.adidas-es.biz *.analytics-hotfix.adidas-es.biz *.analytics-integration.adidas-es.biz *.analytics-preview.adidas-es.biz *.analytics-prod.adidas-es.biz *.analytics-qa.adidas-es.biz *.analytics.adidas-es.biz *.auth.adidas-es.biz *.beta.adidas-es.biz *.blog.adidas-es.biz *.crm.adidas-es.biz *.dashboard.adidas-es.biz *.data-alpha.adidas-es.biz *.insight.adidas-es.biz *.poc-analytics.adidas-es.biz *.poc.adidas-es.biz *.preprod.adidas-es.biz *.preview-analytics.adidas-es.biz *.production-data.adidas-es.biz *.random.adidas-es.biz *.staging-bi.adidas-es.biz *.superset.adidas-es.biz *.wp.adidas-es.biz *.ww1.adidas-es.biz *.ww25.adidas-es.biz *.ww38.adidas-es.biz
crosstruff.org *.crosstruff.org *.hostmaster.crosstruff.org
*.a.doodstream.info *.buyer-api.doodstream.info doodstream.info *.doodstream.info
*.app.frasen.io *.cpcontacts.frasen.io frasen.io *.frasen.io *.soundcloudmarketing.frasen.io
prisonbitchnamegenerator.com *.prisonbitchnamegenerator.com *.random.prisonbitchnamegenerator.com *.ww1.prisonbitchnamegenerator.com *.www-1.prisonbitchnamegenerator.com
richardstevenscosmetics.com *.richardstevenscosmetics.com *.sitemap.richardstevenscosmetics.com *.staging.richardstevenscosmetics.com *.ww7.richardstevenscosmetics.com
*.app.rockettreats.com *.blog.rockettreats.com *.ci.rockettreats.com rockettreats.com *.rockettreats.com
*.admin.seos.me *.hostmaster.seos.me *.la.seos.me *.old.seos.me *.remote.seos.me seos.me *.seos.me
*.com.ubtcreditunion.com *.swift.ubtcreditunion.com ubtcreditunion.com *.ubtcreditunion.com
*.admin.yakored4.pro *.app.yakored4.pro *.dashboard.yakored4.pro *.dev.yakored4.pro *.portal.yakored4.pro *.staging.yakored4.pro *.test.yakored4.pro yakored4.pro *.yakored4.pro