76/100 SECURITY SCORE

Certificate Information

Subject
CN=1317.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 10, 2026
Valid Until
July 09, 2026 57 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
91:3D:32:8D:33:AA:01:3B:1F:88:0A:7E:3B:AA:04:A4:F6:7D:3D:F6:E6:44:05:21:98:5C:93:62:EE:8E:F6:BE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
388bet.design *.388bet.design *.cdn.388bet.design

Other domains in certificate

1317.it *.1317.it *.hostmaster.1317.it *.wwww.1317.it
*.02e6d64c-c1da-48a1-98f7-5658a9c43484.35380.locker *.2f5b15c4-4f4a-47e7-b482-ebc82089541a.35380.locker 35380.locker *.35380.locker *.admin.35380.locker *.api.35380.locker *.app.35380.locker *.assets.35380.locker *.backup.35380.locker *.bteskgmf.35380.locker *.dashboard.35380.locker *.demo.35380.locker *.dev.35380.locker *.docs.35380.locker *.ec41d25e-de7b-4753-9117-1709c6e1791f.35380.locker *.hostmaster.35380.locker *.hr.35380.locker *.jmwnqadmin.35380.locker *.mail.35380.locker *.mailer.35380.locker *.marketing.35380.locker *.public.35380.locker *.secure.35380.locker *.staging.35380.locker *.stg.35380.locker *.test.35380.locker *.tzrlnstg.35380.locker *.uat.35380.locker *.v1.35380.locker *.v2.35380.locker *.vdrnyaxt.35380.locker *.web.35380.locker
*.app.cct-pt.lol cct-pt.lol *.cct-pt.lol *.demo.cct-pt.lol *.neu.cct-pt.lol *.staging.cct-pt.lol
chhinnamasta.org *.chhinnamasta.org *.images.chhinnamasta.org *.mx.chhinnamasta.org
jmch-inc.net *.jmch-inc.net *.static.jmch-inc.net
*.axzdys.manjiangxian.cn *.gwokvxav.manjiangxian.cn manjiangxian.cn *.manjiangxian.cn *.qwspjih.manjiangxian.cn *.tihdfnk.manjiangxian.cn
*.api.nte.solutions *.credige.nte.solutions *.dev.nte.solutions *.hynbgcredige.nte.solutions *.jobs.nte.solutions nte.solutions *.nte.solutions *.shgopexw.nte.solutions *.wp.nte.solutions
*.admin.solli.it *.analytics.solli.it *.backend.solli.it *.dashboard.solli.it *.demo.solli.it *.dev.solli.it *.fam.solli.it *.forecast.solli.it *.intel.solli.it *.m.solli.it solli.it *.solli.it *.superset.solli.it
*.app.storebly.com *.dan.storebly.com *.intranet.storebly.com storebly.com *.storebly.com *.ww1.storebly.com *.ww12.storebly.com
*.edam.xllp.com xllp.com *.xllp.com