Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bronav.com.br
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 26, 2026
Valid Until
July 25, 2026
69 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A1:9D:B1:13:5E:98:B3:BC:F7:92:43:CA:F0:6A:32:CC:A1:97:71:F3:15:64:8C:14:61:19:46:5A:9D:83:8D:18
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
oznetlaw.net
*.oznetlaw.net
betflixapk.net
*.betflixapk.net
*.ww25.betflixapk.net
*.ww38.betflixapk.net
bronav.com.br
*.bronav.com.br
krym-grafica.site
*.krym-grafica.site
*.ww25.krym-grafica.site
livas.life
*.livas.life
*.2.ngbuburit.com
*.4k-broadcast.ngbuburit.com
*.4k-sports.ngbuburit.com
*.4k.ngbuburit.com
*.all-state5g.ngbuburit.com
*.allsport-gamelive.ngbuburit.com
*.amazon-prime-sports.ngbuburit.com
*.apay-streaminghd.ngbuburit.com
*.apk-stream.ngbuburit.com
*.beinsports-livestream-acces.ngbuburit.com
*.big-network.ngbuburit.com
*.box-ticket-office.ngbuburit.com
*.bunch-quality-4k.ngbuburit.com
*.canal-sport4k.ngbuburit.com
*.canal-sportstv.ngbuburit.com
*.chaine-officielle-tv.ngbuburit.com
*.chaine-tv.ngbuburit.com
*.cpa.ngbuburit.com
*.event-acces-sportlite.ngbuburit.com
*.fr-tvreseaux-officiel.ngbuburit.com
*.free-access-tvhd.ngbuburit.com
*.free-livesports.ngbuburit.com
*.free-stream4k.ngbuburit.com
*.game-day.ngbuburit.com
*.gosports4k.ngbuburit.com
*.high-school-8kgw-tv.ngbuburit.com
*.highlightsports.ngbuburit.com
*.hsnetwork.ngbuburit.com
*.kc2-sportshd.ngbuburit.com
*.kyysports-stream.ngbuburit.com
*.lien-diffusion-sport.ngbuburit.com
*.live-app-events.ngbuburit.com
*.live-stream4k.ngbuburit.com
*.livesport7k-hd.ngbuburit.com
*.match-sports.ngbuburit.com
*.news-stream.ngbuburit.com
*.nfhs-network.ngbuburit.com
ngbuburit.com
*.ngbuburit.com
*.on3-sports4k.ngbuburit.com
*.play-onstreamingtv.ngbuburit.com
*.rogersport.ngbuburit.com
*.samsports-streamhd.ngbuburit.com
*.sky-sports-channel.ngbuburit.com
*.spektrumhdm.ngbuburit.com
*.sport-network.ngbuburit.com
*.sports-4g.ngbuburit.com
*.sports-broadcasttv.ngbuburit.com
*.sports-center.ngbuburit.com
*.sports-hd-live-tv.ngbuburit.com
*.sports4k.ngbuburit.com
*.stream-acces-sportlite.ngbuburit.com
*.stream-online.ngbuburit.com
*.stream.ngbuburit.com
*.ticketsmaster.ngbuburit.com
*.uhdsports4k.ngbuburit.com
*.watch-quality4k.ngbuburit.com
*.website-sport4k.ngbuburit.com
*.yahoo-tv.ngbuburit.com
*.youtube-stream-official.ngbuburit.com
nutricionclinica.org
*.nutricionclinica.org
oda.com.pl
*.oda.com.pl
shahid4u.center
*.shahid4u.center
sldmtv.org
*.sldmtv.org
springchrip.com
*.springchrip.com
*.ww38.springchrip.com
*.cpanel.tamigo.store
*.mail.tamigo.store
tamigo.store
*.tamigo.store
twaaoz.com
*.twaaoz.com
Other domains in certificate