Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=landauer.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 20, 2026
Valid Until
May 21, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
18:21:D8:93:A7:D5:FD:66:47:E2:5D:B1:BA:BF:89:C3:77:04:3A:E2:70:84:77:0F:22:90:70:8B:0E:0A:94:ED
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
oven.it *.oven.it *.macfarlanemr.oven.it

Other domains in certificate

*.0iu65.accct.org *.0lw9d.accct.org *.1jbsz.accct.org *.2774.accct.org *.44665465.accct.org *.4uute.accct.org *.55koh.accct.org *.5int7.accct.org *.82847791.accct.org accct.org *.accct.org *.accctftp.accct.org *.ahdus.accct.org *.am5i5.accct.org *.bmlr.accct.org *.cbt.accct.org *.cqrm.accct.org *.d4szh.accct.org *.dcrf.accct.org *.f7u75.accct.org *.fcile.accct.org *.finaltest.accct.org *.geyc.accct.org *.hhto.accct.org *.hqrr.accct.org *.ijj8d.accct.org *.jdze.accct.org *.llolh.accct.org *.lmlqp.accct.org *.lple.accct.org *.lxhz8.accct.org *.pjmx.accct.org *.pmddf.accct.org *.pvwx.accct.org *.qoa8k.accct.org *.s.accct.org *.snjdw.accct.org *.sxhh3.accct.org *.tuj4c.accct.org *.uk96n.accct.org *.vch9t.accct.org *.vebl.accct.org *.vkuj.accct.org *.whav2.accct.org *.ww25.accct.org *.xxb48.accct.org *.zphay.accct.org
allchemy.me *.allchemy.me *.ww38.allchemy.me
calif.org *.calif.org *.factcards.calif.org *.oac.calif.org *.oag.calif.org *.reboot.calif.org *.riverside.calif.org *.smile.calif.org *.superset.calif.org *.test.calif.org *.wildcard.calif.org
*.dev.forumsport.it forumsport.it *.forumsport.it
*.app.ideveloped.it ideveloped.it *.ideveloped.it
irritante.it *.irritante.it *.remote.irritante.it
itsallperformativeanyways.com *.itsallperformativeanyways.com *.random.itsallperformativeanyways.com *.ww25.itsallperformativeanyways.com
*.demo.landauer.it landauer.it *.landauer.it
needing.it *.needing.it *.one.needing.it
nextgoacademy.com.br *.nextgoacademy.com.br *.www.nextgoacademy.com.br
*.dev.parcheggiatore.it parcheggiatore.it *.parcheggiatore.it