91/100 SECURITY SCORE

Certificate Information

Subject
CN=almcloud.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 16, 2026
Valid Until
July 15, 2026 61 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2B:63:CA:74:B5:EC:56:CF:4C:6F:CF:64:5B:A4:52:0B:B8:B8:6C:E3:70:93:25:FA:58:86:BB:BF:A2:3B:4A:4D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
geolocation=(), midi=(), sync-xhr=(); +6 more
Recommendations
  • Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
animalresourcefoundation.com *.animalresourcefoundation.com *.ptr7903.animalresourcefoundation.com *.send.animalresourcefoundation.com

Other domains in certificate

almcloud.it *.almcloud.it *.apps.almcloud.it *.leconsippsrlapp1.almcloud.it *.ocp.almcloud.it *.spc.almcloud.it
arkansascarpetcleaning.com *.arkansascarpetcleaning.com *.backup.arkansascarpetcleaning.com *.crm.arkansascarpetcleaning.com *.demo.arkansascarpetcleaning.com *.forums.arkansascarpetcleaning.com *.m.arkansascarpetcleaning.com *.old.arkansascarpetcleaning.com *.sitemap.arkansascarpetcleaning.com *.sitemaps.arkansascarpetcleaning.com *.store.arkansascarpetcleaning.com
artworkinvesting.com *.artworkinvesting.com *.wildcard.artworkinvesting.com
automotrice.com *.automotrice.com *.hostmaster.automotrice.com *.mail2.automotrice.com *.ww42.automotrice.com
*.backup.banila.co banila.co *.banila.co *.crm.banila.co *.forum.banila.co *.global.banila.co *.owa.banila.co *.random.banila.co *.serum.banila.co *.test.banila.co *.wiki.banila.co *.ww16.banila.co *.ww17.banila.co *.ww38.banila.co *.ww6.banila.co *.www.banila.co *.zero.banila.co
bankruptcyautoadvisors.com *.bankruptcyautoadvisors.com *.email.bankruptcyautoadvisors.com
bcmcp.com *.bcmcp.com *.crm.bcmcp.com
*.adm.bm6005.com bm6005.com *.bm6005.com *.cb.bm6005.com *.holly.bm6005.com *.market.bm6005.com *.primary.bm6005.com *.rosa.bm6005.com *.webinar.bm6005.com
*.a.falemonqf.com falemonqf.com *.falemonqf.com
*.anastasiia.hortman-stemcell.com *.com.hortman-stemcell.com hortman-stemcell.com *.hortman-stemcell.com
*.blog.kleinanzeigen.ae *.demo.kleinanzeigen.ae *.dev.kleinanzeigen.ae *.home.kleinanzeigen.ae kleinanzeigen.ae *.kleinanzeigen.ae *.mail.kleinanzeigen.ae *.media.kleinanzeigen.ae *.random.kleinanzeigen.ae *.shop.kleinanzeigen.ae *.staging.kleinanzeigen.ae *.test.kleinanzeigen.ae *.www.kleinanzeigen.ae
*.classifieds.sunana.com *.news.sunana.com *.sms.sunana.com sunana.com *.sunana.com *.ticket.sunana.com *.ww25.sunana.com