Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=aermatica3d.eu
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 28, 2026
Valid Until
April 28, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DF:97:45:E6:39:6E:9D:03:89:3D:20:08:A2:90:5C:68:DE:80:74:71:A1:5C:28:9C:79:D0:3F:56:63:90:55:8B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
raliant.com *.raliant.com *.ns1.raliant.com *.ww25.raliant.com *.ww38.raliant.com

Other domains in certificate

aermatica3d.eu *.aermatica3d.eu
alfaseguridad.com *.alfaseguridad.com
angelinvestors.au *.angelinvestors.au *.random.angelinvestors.au *.ww25.angelinvestors.au *.ww38.angelinvestors.au
bode-berge.cfd *.bode-berge.cfd
bradfotdexchange.com *.bradfotdexchange.com *.ww38.bradfotdexchange.com
clterry.com *.clterry.com *.es.clterry.com
formila1.com *.formila1.com
*.ci.gayzerhd.com gayzerhd.com *.gayzerhd.com *.random.gayzerhd.com *.uat.gayzerhd.com *.ww1.gayzerhd.com
gyroskinggrill.com *.gyroskinggrill.com
helaneys-bakery.com *.helaneys-bakery.com
ironkisshammers.com *.ironkisshammers.com
kubij.cc *.kubij.cc *.m.kubij.cc *.ww38.kubij.cc
*.development.loucosporperfume.net loucosporperfume.net *.loucosporperfume.net *.random.loucosporperfume.net
mahjongg.com.au *.mahjongg.com.au *.random.mahjongg.com.au
*.bjp2024.mangafinic.com mangafinic.com *.mangafinic.com
meinleuropeanland.com *.meinleuropeanland.com *.random.meinleuropeanland.com
mooble.com.au *.mooble.com.au
mvvs.net *.mvvs.net *.wifi.mvvs.net
popupshop.com.au *.popupshop.com.au
privateinvestment.co.za *.privateinvestment.co.za *.random.privateinvestment.co.za
psychline.com.au *.psychline.com.au *.ww38.psychline.com.au
*.2.ptj.au ptj.au *.ptj.au *.random.ptj.au
*.admin.springfield-store.online *.demo.springfield-store.online springfield-store.online *.springfield-store.online *.ww25.springfield-store.online
*.random.the-massage-clinic.com.au *.reporting.the-massage-clinic.com.au the-massage-clinic.com.au *.the-massage-clinic.com.au
valorvenalvehiculo.com *.valorvenalvehiculo.com
wansof.net *.wansof.net
win-withus.com *.win-withus.com
wursthaussa.com *.wursthaussa.com
zubeth.cf *.zubeth.cf