Open
Cached
·
just now
96/100
SECURITY SCORE
Certificate Information
Subject
CN=dmcl.support.citek.vn
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 07, 2026
Valid Until
May 08, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:96:D6:C7:62:5A:7D:51:FA:58:6B:57:DB:51:B3:EF:9A:37:E2:3C:A2:1D:B3:01:4D:80:F2:08:47:8B:9D:52
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Basic
script-src; object-src; base-uri; +1 more
script-src 'self' 'strict-dynamic' static.zohocdn.com salesiq.zoho.com dtzpfzv31buvf.cloudfront.net cdn.pagesense.io js.zohocdn.com widgets.zohosalesiq.com zohotagmanager.cdn.pagesense.io 'nonce-f492f3db7e605f1f600da34c82877ed1';object-src 'none';base-uri 'self' static.zohocdn.com;report-uri https://logsapi.zoho.com/csplog?service=support;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Present
accelerometer=(), ambient-light-sensor=(), bluetooth=(), compute-pressure=(), document-domain=(), encrypted-media=(), gamepad=(), gyroscope=(), hid=(), magnetometer=(), midi=(), screen-wake-lock=(), serial=(), speaker-selection=(), usb=(), xr-spatial-tracking=()
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 4 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
82 domains
soporte.vectorpro.mx
test.2point0concepts.com
vizvet.zoho.actdata.io
gce.support.actionkpi.com
helpdesk.actionlink.com
tickets.adstudiopanama.com
atsvegas.afgtechnology.com
customer.alfatech.jp
soporte.aptus-legal.com.mx
help.ashgro.org
support.atrix10.ca
community.avstudio.app
support.bdgllp.com
myhelp.bizup.me
suporte.cabeamentoderedebh.com.br
support.cadre21.org
dmcl.support.citek.vn
devrysupport.cloudrangecyber.com
helpdesk.is.com.ly
helpcentre.smarthills.com.pg
support.d-kidd.com
support.digiswitch.in
support.ecomonline.ru
support.elagaan.com
support.endevorpay.com
support.exporgin.shop
support.fluxeps.com
altacombustible.foxguar.com
help.franchiseninja.ai
asiasupport.halodata.asia
idsupport.halodata.asia
icbc-support.hemlockharling.com
support.hostingcart.us
help.icanotes.com
support.impactfoundry.org
support.inflexionpoint.ai
support.intasend.com
pisa.intecfra.com
support.intelioum.com
soporte.ipps.com.mx
ayuda.itechi.cl
soporte.itxpress.cl
support.kgkgroup.com
support.klauer.com
help.krystalklean.net
soporte.m2crowd.com
helpdesk.mabgroup.com
support.massedcompute.com
soporte.mimp.com.mx
support.mordorstaffing.co
support.nexusis.com
cvctx.nocoperations.com
support.nordic-computers.com
zoho.nxtexe.com
support.offsiteimagemgt.com
support.omacro.com
support.onestopnw.com
support.precisionlawnandlandscape.com
mcvhelpdesk.precisionmedicalbilling.com
support.prfipr.org
support.pricesplus.com.au
support.pwsgroup.co.za
helpdesk.reachstream.net
service.relaxedcruises.com
support.rep-digital.com
support.securitylifeinc.com
support.servicebid.net
desk.sunshinejustice.us
repairs.svots.edu
support.sweeky.com
support.teefiddy.co
help.terminologyinc.com
support.tesorohq.io
support.thinglogix.com
support.tts-talent.com
serviciosiym.ubo.cl
help.ultrabali.com
desk.uwindsorgss.ca
support.velesit.com
support.vinylwindowdesigns.com
support.yinva.com
support.zoomrx.dev
Other domains in certificate