Cached · just now
79/100 SECURITY SCORE

Certificate Information

Subject
CN=citylandtech.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 05, 2026
Valid Until
May 06, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A0:51:F5:4C:3A:60:CF:46:73:8F:53:BA:A7:95:B0:AA:75:EC:DE:3E:8F:14:03:43:08:D8:98:3B:14:7E:82:31
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pinailon.com *.pinailon.com

Other domains in certificate

*.1e64ade1b9f2f2911838fd39e77e3802.938dmy301.top 938dmy301.top *.938dmy301.top
citylandtech.com *.citylandtech.com *.globalworkplace.citylandtech.com
plinkooz.it.com *.plinkooz.it.com
officesystems.co *.officesystems.co
oinum.top *.oinum.top
online-ads-gb-9421.click *.online-ads-gb-9421.click
onlinewebtool.it *.onlinewebtool.it
opencasesbysourceapp.com *.opencasesbysourceapp.com
opentravelchoices.live *.opentravelchoices.live
openviewmri.com *.openviewmri.com
orangeokloslinxsao.info *.orangeokloslinxsao.info
orofinanzabest.com *.orofinanzabest.com
oroflite.click *.oroflite.click
paperhands.co *.paperhands.co
parchicommerciali.it *.parchicommerciali.it
parimatchstrength.com *.parimatchstrength.com
parisirishdancecompany.com *.parisirishdancecompany.com
paroissedevelizy.org *.paroissedevelizy.org
partidos.co *.partidos.co
pazartesindebuyukfrstlr.shop *.pazartesindebuyukfrstlr.shop
peak-eclipse.mobi *.peak-eclipse.mobi
pendrivez.com *.pendrivez.com
perfectweddingvenue.cyou *.perfectweddingvenue.cyou
performancegunworks.com *.performancegunworks.com
pgbcz.cc *.pgbcz.cc
pgowbt.design *.pgowbt.design
piccolemedioimprese.it *.piccolemedioimprese.it
piccolocuore.it *.piccolocuore.it
pinless.co *.pinless.co
piscinaidromassaggio.it *.piscinaidromassaggio.it
pitbullsnews.com *.pitbullsnews.com
pk45.cc *.pk45.cc
pkjqj.net *.pkjqj.net
planetamazigh.com *.planetamazigh.com
platinumvacationguide.xyz *.platinumvacationguide.xyz
play-apex-arena.xyz *.play-apex-arena.xyz
play-omega-stronghold.xyz *.play-omega-stronghold.xyz
play-sapphire-expedition.xyz *.play-sapphire-expedition.xyz
playfai.com *.playfai.com
playgrounds.in *.playgrounds.in
playjp1131.com *.playjp1131.com
pncpaymentsolutions.com *.pncpaymentsolutions.com
popbunker.net *.popbunker.net