Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=gogoflight.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026
46 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F5:F8:DF:19:3F:0C:2B:6B:B3:A7:17:4E:44:A3:63:B8:94:8F:FB:B2:03:AA:4B:FE:A2:1C:A2:B4:E7:2B:94:44
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
taprocurando.com.br
*.taprocurando.com.br
aireal.co.uk
*.aireal.co.uk
ashtabulacountyauditor.com
*.ashtabulacountyauditor.com
ataglamce.com
*.ataglamce.com
*.random.ataglamce.com
chiropractors.co.za
*.chiropractors.co.za
detlevschlichter.com
*.detlevschlichter.com
*.ci.dll.au
dll.au
*.dll.au
*.i.dll.au
*.ni.dll.au
*.online.dll.au
*.support.dll.au
*.ww16.dll.au
dmvnnow.com
*.dmvnnow.com
*.tw.dmvnnow.com
*.ww25.dmvnnow.com
dogpacks.com
*.dogpacks.com
*.22-33-44-55.fitnessvideos.com.au
fitnessvideos.com.au
*.fitnessvideos.com.au
*.gsuxxshfgtieuesm.fitnessvideos.com.au
*.airborne.gogoflight.com
*.airbornmedia.gogoflight.com
*.flowise.gogoflight.com
gogoflight.com
*.gogoflight.com
*.ww31.gogoflight.com
*.ww38.gogoflight.com
insurancepartners.com.au
*.insurancepartners.com.au
isaro-haarstudio.de
*.isaro-haarstudio.de
microphones.com.au
*.microphones.com.au
*.ww25.microphones.com.au
motlyfools.com
*.motlyfools.com
*.area-symb.osis.it
*.hostmaster.osis.it
*.mem.osis.it
*.mic.osis.it
osis.it
*.osis.it
*.osm.osis.it
*.sem.osis.it
*.semi.osis.it
partial.com.au
*.partial.com.au
*.random.partial.com.au
plinkapp.site
*.plinkapp.site
*.ww38.plinkapp.site
*.members.ptimum.com
*.o.ptimum.com
*.pco.ptimum.com
ptimum.com
*.ptimum.com
pubgdonate.store
*.pubgdonate.store
*.ww38.pubgdonate.store
sportteams.it
*.sportteams.it
stemmen.be
*.stemmen.be
tarotcards.com.au
*.tarotcards.com.au
tgf.de
*.tgf.de
*.ww16.tgf.de
thesocialfolk.com.au
*.thesocialfolk.com.au
*.cpcontacts.togg.it
togg.it
*.togg.it
*.kazan.vintoncountynationalbank.com
vintoncountynationalbank.com
*.vintoncountynationalbank.com
*.ww38.vintoncountynationalbank.com
wcb.au
*.wcb.au
Other domains in certificate