Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=diigispecmx.xyz
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 13, 2026
Valid Until
July 12, 2026
78 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:BD:9F:CF:AF:CE:D4:3C:C5:62:AC:4A:B3:2B:19:3F:82:36:57:08:72:99:50:AC:7A:13:E9:9C:85:23:1B:B6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
olc.su
*.olc.su
*.f.olc.su
*.host1.olc.su
*.old.olc.su
*.porto.olc.su
*.rn.olc.su
*.sib-seti.olc.su
*.srv.olc.su
*.static.olc.su
*.wiki.olc.su
4848116.com
*.4848116.com
*.random.4848116.com
*.rds.4848116.com
77-rabbit.bet
*.77-rabbit.bet
*.admin.aeroport.it
aeroport.it
*.aeroport.it
*.aeropuertoelsalvador.aeroport.it
*.backend.aeroport.it
*.cairo-airport.aeroport.it
*.gallatinfield.aeroport.it
*.staging.aeroport.it
*.toulouse.aeroport.it
aiguys.online
*.aiguys.online
*.clients.aiguys.online
*.ls.aiguys.online
*.sentinels.aiguys.online
bijjani.com
*.bijjani.com
*.mail.bijjani.com
*.1846m.diigispecmx.xyz
*.1yme1.diigispecmx.xyz
diigispecmx.xyz
*.diigispecmx.xyz
*.pp4gk.diigispecmx.xyz
*.s28s9.diigispecmx.xyz
*.xbh6h.diigispecmx.xyz
*.z3dl1.diigispecmx.xyz
*.z4gbs.diigispecmx.xyz
f64757085.com
*.f64757085.com
*.wwww.f64757085.com
*.007ab328-7a4b-49ab-b120-432784639b54.hffa2w3.com
*.56b91999-0997-4d53-a7d0-5afbf831b636.hffa2w3.com
*.6cef5226-65df-4100-9ad7-944b63f733fe.hffa2w3.com
*.admin.hffa2w3.com
*.api.hffa2w3.com
*.app.hffa2w3.com
*.assets.hffa2w3.com
*.cloud.hffa2w3.com
*.d78bd0b8-057c-4307-ab7f-905fe10ac420.hffa2w3.com
*.demo.hffa2w3.com
*.dev1redash.hffa2w3.com
hffa2w3.com
*.hffa2w3.com
*.members.hffa2w3.com
*.nxflxremote.hffa2w3.com
*.rd.hffa2w3.com
*.rds.hffa2w3.com
*.rdweb.hffa2w3.com
*.redash.hffa2w3.com
*.remote.hffa2w3.com
*.staging.hffa2w3.com
*.test.hffa2w3.com
*.goldapple.k9677.live
k9677.live
*.k9677.live
marosconstruction.co
*.marosconstruction.co
*.o2vlaavtur.marosconstruction.co
ofspain.icu
*.ofspain.icu
*.checkout.positivevibe.it
positivevibe.it
*.positivevibe.it
rqesa.cc
*.rqesa.cc
*.admin.sayang138rtp.homes
*.api.sayang138rtp.homes
*.backend.sayang138rtp.homes
sayang138rtp.homes
*.sayang138rtp.homes
*.app.spinbonus138.homes
spinbonus138.homes
*.spinbonus138.homes
*.www.spinbonus138.homes
Other domains in certificate