Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=omacini.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 23, 2026
Valid Until
May 24, 2026
87 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
67:65:99:20:6A:C4:3A:29:A3:27:1F:36:C6:1A:55:45:EB:92:2B:6F:0B:04:9A:11:4B:47:C1:82:E4:39:77:8D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
omacini.it
*.omacini.it
bild-news.de
*.bild-news.de
*.wel.bild-news.de
changyuejinming.asia
*.changyuejinming.asia
*.ww25.changyuejinming.asia
clickmaven.co.za
*.clickmaven.co.za
*.demo.clickmaven.co.za
*.beta.equityassurance.com
*.client.equityassurance.com
*.controlpanel.equityassurance.com
*.email.equityassurance.com
equityassurance.com
*.equityassurance.com
*.mx.equityassurance.com
*.qa.equityassurance.com
*.random.equityassurance.com
*.users.equityassurance.com
*.demo.jome.it
jome.it
*.jome.it
*.01a9dffd-9e02-45cf-90ae-693aad32cc7c.loversquiz.com
*.api.loversquiz.com
*.app.loversquiz.com
*.azure.loversquiz.com
*.blog.loversquiz.com
*.cabinet.loversquiz.com
*.dev.loversquiz.com
*.f2226afa-f7ac-4b9c-b14b-640ac99bee40.loversquiz.com
*.hostmaster.loversquiz.com
loversquiz.com
*.loversquiz.com
*.m.loversquiz.com
*.payment.loversquiz.com
*.portal.loversquiz.com
*.rds.loversquiz.com
*.remoteapp1.loversquiz.com
*.vdi.loversquiz.com
*.vpn.loversquiz.com
*.web2.loversquiz.com
*.xildawrn.loversquiz.com
neutros.it
*.neutros.it
nigi.it
*.nigi.it
notiziaonline.it
*.notiziaonline.it
novapathtech.com
*.novapathtech.com
overthediet.it
*.overthediet.it
ovis.it
*.ovis.it
pagatore.it
*.pagatore.it
pagination.it
*.pagination.it
peu.me
*.peu.me
*.tu.peu.me
praises.it
*.praises.it
*.blog.qy001.top
qy001.top
*.qy001.top
*.alwin.rapidspace.de
*.carosallerlei.rapidspace.de
*.coolstudent.rapidspace.de
*.frag.rapidspace.de
*.geos-archiv.rapidspace.de
*.ifl-sim.rapidspace.de
*.jobsuche.rapidspace.de
*.kgv-am-ostbad-jena.rapidspace.de
*.mail.rapidspace.de
*.michi.rapidspace.de
*.pp.rapidspace.de
*.psp.rapidspace.de
rapidspace.de
*.rapidspace.de
*.vdfnet.rapidspace.de
*.waal.rapidspace.de
*.xwheelz.rapidspace.de
*.zes.rapidspace.de
*.hermes.simplesolar.co.uk
simplesolar.co.uk
*.simplesolar.co.uk
Other domains in certificate