Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bw357.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 24, 2026
Valid Until
May 25, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:85:A9:61:79:5F:15:3E:1D:AD:70:9E:95:99:DE:C4:ED:AA:29:3B:FD:B6:EA:B0:9F:BD:12:A0:39:FD:E4:BD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
morillo.com
*.morillo.com
*.acceso.morillo.com
*.admin.morillo.com
*.alix.morillo.com
*.allison.morillo.com
*.anyconnect.morillo.com
*.api.morillo.com
*.asa.morillo.com
*.autoconfig.morillo.com
*.autodiscover.morillo.com
*.aytovalde.morillo.com
*.cisco.morillo.com
*.ciscoasa.morillo.com
*.ciscovpn.morillo.com
*.clientesvpn.morillo.com
*.cloud.morillo.com
*.cloudapp.morillo.com
*.cpanel.morillo.com
*.cpcalendars.morillo.com
*.cpcontacts.morillo.com
*.demo.morillo.com
*.desktop.morillo.com
*.driverp.morillo.com
*.drvpn.morillo.com
*.firewall.morillo.com
*.gate.morillo.com
*.gateway.morillo.com
*.gp.morillo.com
*.imap.morillo.com
*.lilia.morillo.com
*.mobileconnect.morillo.com
*.outlook.morillo.com
*.palovpn.morillo.com
*.ra-vpn.morillo.com
*.ra.morillo.com
*.ravpn.morillo.com
*.receiver.morillo.com
*.sitemap.morillo.com
*.sitemaps.morillo.com
*.sslvpn.morillo.com
*.studentsvpn.morillo.com
*.virtualapps.morillo.com
*.virtualstudent.morillo.com
*.vpn2.morillo.com
*.vpnssl.morillo.com
*.webdisk.morillo.com
*.webmail.morillo.com
*.webvpn.morillo.com
*.workspace.morillo.com
*.ww1.morillo.com
*.ww16.morillo.com
*.ww17.morillo.com
*.ww25.morillo.com
*.xapp.morillo.com
*.3g.bw357.com
*.app.bw357.com
*.apps.bw357.com
bw357.com
*.bw357.com
*.chat.bw357.com
*.crm.bw357.com
*.dan.bw357.com
*.dev.bw357.com
*.dqzjjsslvpn.bw357.com
*.email.bw357.com
*.f94a708d-13e5-4496-8551-6a99145abdc7.bw357.com
*.m.bw357.com
*.ns.bw357.com
*.rds.bw357.com
*.staging.bw357.com
*.ups.bw357.com
*.vpn.bw357.com
*.www.bw357.com
*.alertacpf.daatcom.com
*.analytics.daatcom.com
*.business.daatcom.com
*.chart.daatcom.com
*.cpcontacts.daatcom.com
daatcom.com
*.daatcom.com
*.dash.daatcom.com
*.dashboards.daatcom.com
*.glpi.daatcom.com
*.spartanyouth.daatcom.com
*.superset.daatcom.com
*.vpn.daatcom.com
privateplane.it
*.privateplane.it
*.superset.privateplane.it
Other domains in certificate