75/100 SECURITY SCORE

Certificate Information

Subject
CN=visionaire.it
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 19, 2026
Valid Until
January 17, 2027 81 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
59:81:93:96:17:86:A9:B1:81:F1:3E:BC:BC:B3:A0:C8:89:E5:E5:64:95:A0:A6:6E:E8:F5:B4:9A:8F:7C:09:AA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

78 domains
visionaire.it *.visionaire.it *.agent.visionaire.it *.analytic.visionaire.it *.analytics.visionaire.it *.apps.visionaire.it *.casting.visionaire.it *.cloud.visionaire.it *.correu.visionaire.it *.email.visionaire.it *.eposta.visionaire.it *.exch2016.visionaire.it *.exchangecorp.visionaire.it *.exchmail.visionaire.it *.hostmaster.visionaire.it *.mail.visionaire.it *.mobile.visionaire.it *.mx.visionaire.it *.mymail.visionaire.it *.newmail2013.visionaire.it *.ogrencieposta.visionaire.it *.owa.visionaire.it *.pop.visionaire.it *.reporting.visionaire.it *.securesmtp.visionaire.it *.smail.visionaire.it *.smtp-qa.visionaire.it *.smtp.visionaire.it *.smtpa.visionaire.it *.superset.visionaire.it *.w.visionaire.it *.webmail.visionaire.it *.webmail2013.visionaire.it *.wpenginewww.visionaire.it *.www.visionaire.it

Other domains in certificate

56xs.com *.56xs.com
abheerfoods.com *.abheerfoods.com
aiilgame.com *.aiilgame.com
animal-store.com *.animal-store.com
caadvisorys.info *.caadvisorys.info
*.crm.crypto-nerds.de crypto-nerds.de *.crypto-nerds.de *.mailrelay.crypto-nerds.de *.mx2.crypto-nerds.de *.office.crypto-nerds.de *.pop3.crypto-nerds.de *.sitemap.crypto-nerds.de
freshwv79.com *.freshwv79.com
hy-s-cupsqoy.cc *.hy-s-cupsqoy.cc
irser.cc *.irser.cc
nexatechconsulting.com *.nexatechconsulting.com
pushoperationsdashboards.info *.pushoperationsdashboards.info
receba-os-valores.onl *.receba-os-valores.onl
safemark.net *.safemark.net
serenitybay.sbs *.serenitybay.sbs
ueygqcw216.vip *.ueygqcw216.vip
*.app.yaex.net *.haze.yaex.net *.staging.yaex.net *.taxi.yaex.net *.ww7.yaex.net yaex.net *.yaex.net