Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=honegoods.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 01, 2026
Valid Until
January 30, 2027
76 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
64:99:59:07:10:B7:B0:E1:F1:F2:37:2F:21:49:3A:AD:34:9C:44:E1:25:0B:FB:20:4D:E3:6A:EE:92:EE:8E:F3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
alikes.it
*.alikes.it
*.api.alikes.it
*.demo.alikes.it
*.owa.alikes.it
*.remote.alikes.it
abrenendeg.com
*.abrenendeg.com
*.jobs.abrenendeg.com
ciberturista.com
*.ciberturista.com
*.dddd.ciberturista.com
*.grecia.ciberturista.com
*.lima.ciberturista.com
*.milan.ciberturista.com
*.roma.ciberturista.com
*.admin.digitale-stadt.com
*.app.digitale-stadt.com
digitale-stadt.com
*.digitale-stadt.com
*.dma.digitale-stadt.com
*.emv1.digitale-stadt.com
*.mx1.digitale-stadt.com
*.notexistsadmin.digitale-stadt.com
*.secure.digitale-stadt.com
*.staging.digitale-stadt.com
digiversebd.com
*.digiversebd.com
*.ecommerce.digiversebd.com
*.pay.digiversebd.com
*.api.efaxed.com
*.app.efaxed.com
efaxed.com
*.efaxed.com
*.login.efaxed.com
etraductor.com
*.etraductor.com
expressbancoppel-blog.my
*.expressbancoppel-blog.my
flyhub.cyou
*.flyhub.cyou
*.ebay.honegoods.com
honegoods.com
*.honegoods.com
*.ww38.honegoods.com
*.hostmaster.langit99a.online
langit99a.online
*.langit99a.online
*.backup.minicrociera.com
*.boutique.minicrociera.com
minicrociera.com
*.minicrociera.com
*.new.minicrociera.com
*.sslvpn.minicrociera.com
*.vpn2.minicrociera.com
*.vpnssl.minicrociera.com
*.17.nbnresolving.org
*.entx.nbnresolving.org
nbnresolving.org
*.nbnresolving.org
serverspares.au
*.serverspares.au
*.wildcard.serverspares.au
*.ww38.serverspares.au
*.admin.signin-apple.co
*.app.signin-apple.co
*.coviz.signin-apple.co
*.dev.signin-apple.co
*.findmyiphone.signin-apple.co
*.flowise.signin-apple.co
*.icloud.signin-apple.co
*.m.signin-apple.co
*.portal.signin-apple.co
signin-apple.co
*.signin-apple.co
*.staging.signin-apple.co
*.test.signin-apple.co
*.viz.signin-apple.co
*.webdisk.signin-apple.co
*.webmail.signin-apple.co
*.ww38.signin-apple.co
*.mta-7.startprofitshere.com
startprofitshere.com
*.startprofitshere.com
*.hoptac.tca.asia
tca.asia
*.tca.asia
*.api.virtualtoken.creditcard
virtualtoken.creditcard
*.virtualtoken.creditcard
Other domains in certificate